CVE-2014-7250

No fix known EPSS 5%

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.

Published 2014-12-12 · CVE record · OSV

Products: bsd, freebsd, netbsd, openbsd