CVE-2004-0002: Critical severity FreeBSD FreeBSD vulnerability

Published Feb 3, 2004

Updated

The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.

Affected Software

59 affected components

FreeBSD FreeBSD=4.3-releng

FreeBSD FreeBSD=4.1.1-stable

FreeBSD FreeBSD=4.6-releng

FreeBSD FreeBSD=3.1

FreeBSD FreeBSD=4.1.1-release

FreeBSD FreeBSD=3.0-releng

FreeBSD FreeBSD=5.1-releng

FreeBSD FreeBSD=4.4-stable

FreeBSD FreeBSD=4.6-stable

FreeBSD FreeBSD=4.8-release_p6

FreeBSD FreeBSD=4.6-release

FreeBSD FreeBSD=5.1-release_p5

FreeBSD FreeBSD=4.3-stable

FreeBSD FreeBSD=4.7-stable

FreeBSD FreeBSD=5.0-release_p14

FreeBSD FreeBSD=3.5-stable

FreeBSD FreeBSD=4.3-release_p38

FreeBSD FreeBSD=4.5-stable

FreeBSD FreeBSD=4.6-release_p20

FreeBSD FreeBSD=4.5-release

FreeBSD FreeBSD=5.0-releng

FreeBSD FreeBSD=4.3-release

FreeBSD FreeBSD=4.7-releng

FreeBSD FreeBSD=4.2-stable

FreeBSD FreeBSD=4.5

FreeBSD FreeBSD=3.5.1

FreeBSD FreeBSD=4.4-release_p42

FreeBSD FreeBSD=4.7

FreeBSD FreeBSD=4.1

FreeBSD FreeBSD=3.5.1-stable

FreeBSD FreeBSD=4.4-releng

FreeBSD FreeBSD=4.4

FreeBSD FreeBSD=5.1

FreeBSD FreeBSD=4.7-release_p17

FreeBSD FreeBSD=4.9-pre-release

FreeBSD FreeBSD=3.0

FreeBSD FreeBSD=4.8-pre-release

FreeBSD FreeBSD=5.2

FreeBSD FreeBSD=3.2

FreeBSD FreeBSD=4.5-release_p32

FreeBSD FreeBSD=4.8

FreeBSD FreeBSD=4.2

FreeBSD FreeBSD=4.0-releng

FreeBSD FreeBSD=3.3

FreeBSD FreeBSD=4.0

FreeBSD FreeBSD=4.1.1

FreeBSD FreeBSD=4.6

FreeBSD FreeBSD=4.3

FreeBSD FreeBSD=3.4

FreeBSD FreeBSD=3.5

FreeBSD FreeBSD=5.0-alpha

FreeBSD FreeBSD=4.5-releng

FreeBSD FreeBSD=4.8-releng

FreeBSD FreeBSD=5.0

FreeBSD FreeBSD=3.5.1-release

FreeBSD FreeBSD=4.0-alpha

FreeBSD FreeBSD=4.7-release

FreeBSD FreeBSD=4.9

FreeBSD FreeBSD=4.6.2

Remediation

Patch Available

http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html

Event History

Feb 3, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0002?

CVE-2004-0002 is a denial of service vulnerability that can cause resource exhaustion in affected systems.

How do I fix CVE-2004-0002?

To fix CVE-2004-0002, apply available patches or updates from the FreeBSD project for the versions impacted.

Which versions of FreeBSD are affected by CVE-2004-0002?

CVE-2004-0002 affects multiple versions of FreeBSD, including versions 3.0 through 5.2.

What type of attack does CVE-2004-0002 allow?

CVE-2004-0002 allows remote attackers to execute denial of service attacks by manipulating TCP Maximum Segment Size.

Is there a workaround for CVE-2004-0002?

Temporary workarounds for CVE-2004-0002 may include configuring network parameters to reject abnormally small packets.