CVE-2014-7250

TCP stack - DoS

Title source: llm

Description

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.

Scores

EPSS 0.0373
EPSS Percentile 87.8%

Classification

CWE
CWE-399
Status draft

Affected Products (4)

bsd/bsd
freebsd/freebsd
netbsd/netbsd
openbsd/openbsd

Timeline

Published Dec 12, 2014
Tracked Since Feb 18, 2026