CVE-2004-0002

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-03-03 · updated 2026-06-16

Description

The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.

Affected products

FreeBSD: 3.0, 3.0-releng, 3.1, 3.2, 3.3, 3.4 (+53)

References

http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html
http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html

Get alerted when CVE-2004-0002 or the next vulnerability affects your stack