CVE-2025-56233: High severity OpenIndiana OpenIndiana vulnerability
Openindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP packets with RST or SYN flag set, Openindiana has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within the current receive window, which violates RFC5961. This flaw allows attackers to send multiple random TCP RST/SYN packets to hit the acceptable range of sequence numbers, thereby interrupting normal connections and causing a denial of service attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-56233?
CVE-2025-56233 has been classified as a denial of service vulnerability, significantly impacting system availability.
How do I fix CVE-2025-56233?
To mitigate CVE-2025-56233, consider updating OpenIndiana to the latest version or applying any patches provided by the vendor.
What types of packets are involved in the CVE-2025-56233 vulnerability?
CVE-2025-56233 specifically affects TCP packets with RST or SYN flags set.
Which software is affected by CVE-2025-56233?
CVE-2025-56233 affects OpenIndiana running on the SunOS 5.11 kernel.
What can an attacker achieve with CVE-2025-56233?
An attacker can exploit CVE-2025-56233 to cause a denial of service, leading to potential downtime or unresponsiveness of affected systems.