Description
The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
References
- 20050111 027: RELIABILITY FIX: January 11, 2005 vendor-advisory
- 13819 third-party-advisory
- 1012861 vdb-entry
- 12250 vdb-entry