Vulnerability record · CVE-2005-3675 · published 18 November 2005

CVE-2005-3675: Tcp vulnerability

Tcp · Tcp

The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.

7.8 CVSS 2.0 High EPSS 2.3% · top 17.2%

7.8CVSS 2.0 base score

2.3%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Tcp Tcp

References

Link	Tags
http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf
http://www.kb.cert.org/vuls/id/102014	Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/15468/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23055
http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf
http://www.kb.cert.org/vuls/id/102014	Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/15468/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23055

Track CVE-2005-3675 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-0065Tcp vulnerabilityThe original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that…EPSS 1.9%2 May 2005 5.0CVE-2005-0066Tcp vulnerabilityThe original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within …EPSS 11%22 Dec 2004 5.0CVE-2005-0067Tcp vulnerabilityThe original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to…EPSS 13%22 Dec 2004 5.0CVE-2005-0068ICMP lacks authentication, enabling forged error message TCP denial of serviceThe original ICMP design does not authenticate host-generated error messages, so attackers can forge them against specific TCP connections. This allo…EPSS 54%analysed22 Dec 2004 5.0CVE-2004-1060TCP/IP Path MTU Discovery DoS via Forged ICMP PacketsMultiple TCP/IP and ICMP implementations mishandle Path MTU Discovery (PMTUD), allowing a remote attacker to send forged ICMP "Fragmentation Needed a…EPSS 75%analysed12 Apr 2004

Source: NIST National Vulnerability Database (record CVE-2005-3675), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.