CVE-2005-2068

FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session...

CVE-2018-21018

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions...