CVE-2005-4316

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-17 · updated 2026-06-16

Description

HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

Affected products

Hewlett Packard Enterprise (HPE) HP-UX: 11.00, 11.4, 11.11, 11.23

References

http://secunia.com/advisories/18082/
http://secunia.com/advisories/19086
http://securitytracker.com/id?1015361
http://support.avaya.com/elmodocs2/security/ASA-2006-062.htm
http://www.securityfocus.com/archive/1/376490
http://www.securityfocus.com/archive/1/419594/100/0/threaded
http://www.securityfocus.com/bid/11258
http://www.vupen.com/english/advisories/2005/2945
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5760
http://secunia.com/advisories/18082/
http://secunia.com/advisories/19086
http://securitytracker.com/id?1015361

Get alerted when CVE-2005-4316 or the next vulnerability affects your stack