What’s Vulnerable › Vulnerabilities

CVE-2004-0171

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-03-15 · updated 2026-06-16

Description

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

Affected products

• FreeBSD: 4.6.2, 4.7, 4.8, 4.9, 5.0, 5.1 (+1)
• OpenBSD: 3.3, 3.4

References

• http://lists.seifried.org/pipermail/security/2004-May/003743.html
• http://www.idefense.com/application/poi/display?id=78&type=vulnerabilities
• http://www.kb.cert.org/vuls/id/395670
• http://www.osvdb.org/4124
• http://www.securityfocus.com/bid/9792
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15369
• http://lists.seifried.org/pipermail/security/2004-May/003743.html
• http://www.idefense.com/application/poi/display?id=78&type=vulnerabilities
• http://www.kb.cert.org/vuls/id/395670
• http://www.osvdb.org/4124

Get alerted when CVE-2004-0171 or the next vulnerability affects your stack