CVE-2005-0740: Medium severity OpenBSD OpenBSD vulnerability
Published Jan 13, 2005
·Updated
The TCP stack (tcpinput.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
Affected Software
17 affected components
OpenBSD OpenBSD=2.8
OpenBSD OpenBSD=3.1
OpenBSD OpenBSD=3.3
OpenBSD OpenBSD=2.9
OpenBSD OpenBSD=2.1
OpenBSD OpenBSD=2.2
OpenBSD OpenBSD=2.0
OpenBSD OpenBSD=2.7
OpenBSD OpenBSD=3.2
OpenBSD OpenBSD=2.4
OpenBSD OpenBSD=3.6
OpenBSD OpenBSD=3.0
OpenBSD OpenBSD=3.5
OpenBSD OpenBSD=2.6
OpenBSD OpenBSD=2.5
OpenBSD OpenBSD=2.3
OpenBSD OpenBSD=3.4
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jan 13, 2005
CVE Published
05:00 AM
Mar 13, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0740?
CVE-2005-0740 is considered a denial of service vulnerability that could lead to a system panic.
2
How do I fix CVE-2005-0740?
To mitigate CVE-2005-0740, upgrading to the latest version of OpenBSD that addresses this vulnerability is recommended.
3
Which versions of OpenBSD are affected by CVE-2005-0740?
CVE-2005-0740 affects OpenBSD versions 2.0 through 3.6.
4
Can CVE-2005-0740 be exploited remotely?
Yes, CVE-2005-0740 can be exploited remotely by attackers sending crafted TCP timestamp options.
5
What happens if my system is affected by CVE-2005-0740?
If your system is affected by CVE-2005-0740, it could become unresponsive or crash due to the induced panic.