CVE-2005-2068

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-07-05 · updated 2026-06-16

Description

FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session.

Affected products

FreeBSD: 4.0, 4.1, 4.1.1, 4.2, 4.3, 4.4 (+14)

References

Get alerted when CVE-2005-2068 or the next vulnerability affects your stack