6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.066 Low
EPSS
Percentile
93.7%
Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).
CPE | Name | Operator | Version |
---|---|---|---|
freebsd:freebsd | freebsd | eq | 5.4 |
freebsd:freebsd | freebsd | eq | 5.3 |
ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc
secunia.com/advisories/18696
securityreason.com/securityalert/399
securitytracker.com/id?1015566
www.osvdb.org/22861
www.securityfocus.com/bid/16466
www.vupen.com/english/advisories/2006/0409
exchange.xforce.ibmcloud.com/vulnerabilities/24453