3 matches found
OSEC-2026-11 Out of order segment reassembly allows remote denial of service
A remote peer that completes a normal TCP handshake can send a stream of small out-of-order segments that never fill the gap at rcvnxt. utcp keeps one reassembly entry per segment bounded per connection only by the receive window, about 65000 one-byte entries and re-folds the whole queue on every...
CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when processing CNCTspecificdata segments during authentication, the server assumes segments arrive in strictly ascending order. If segments arrive out of order, the Array class's grow...