CVE-2005-0740

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-13 · updated 2026-06-16

Description

The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.

Affected products

OpenBSD: 2.0, 2.1, 2.2, 2.3, 2.4, 2.5 (+11)

References

http://secunia.com/advisories/13819
http://securitytracker.com/id?1012861
http://www.openbsd.org/errata35.html
http://www.securityfocus.com/bid/12250
http://secunia.com/advisories/13819
http://securitytracker.com/id?1012861
http://www.openbsd.org/errata35.html
http://www.securityfocus.com/bid/12250

Get alerted when CVE-2005-0740 or the next vulnerability affects your stack