CVE-2005-3675

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-18 · updated 2026-06-16

Description

The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.

Affected products

Tcp: all versions

References

http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf
http://www.kb.cert.org/vuls/id/102014
http://www.securityfocus.com/bid/15468/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23055
http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf
http://www.kb.cert.org/vuls/id/102014
http://www.securityfocus.com/bid/15468/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23055

Get alerted when CVE-2005-3675 or the next vulnerability affects your stack