Total vulnerabilities in the database
The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes invalid arguments to be used when calculating the retransmit timeout.
| Software | From | Fixed in |
|---|---|---|
| openbsd / openbsd | 2.8 | 2.8.x |
| openbsd / openbsd | 3.1 | 3.1.x |
| openbsd / openbsd | 3.3 | 3.3.x |
| openbsd / openbsd | 2.9 | 2.9.x |
| openbsd / openbsd | 2.1 | 2.1.x |
| openbsd / openbsd | 2.2 | 2.2.x |
| openbsd / openbsd | 2.0 | 2.0.x |
| openbsd / openbsd | 2.7 | 2.7.x |
| openbsd / openbsd | 3.2 | 3.2.x |
| openbsd / openbsd | 2.4 | 2.4.x |
| openbsd / openbsd | 3.6 | 3.6.x |
| openbsd / openbsd | 3.0 | 3.0.x |
| openbsd / openbsd | 3.5 | 3.5.x |
| openbsd / openbsd | 2.6 | 2.6.x |
| openbsd / openbsd | 2.5 | 2.5.x |
| openbsd / openbsd | 2.3 | 2.3.x |
| openbsd / openbsd | 3.4 | 3.4.x |