Skip to content
Fencer Vulns
medium 5.0

CVE-2004-0230 json

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connecti…

published 2004-05-05 22 y ago modified 2026-10-09 30 d ago also EUVD-2004-0230

cvss
5.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
80.3%
EPSS 80.3% chance of exploitation in 30 days, percentile 99.6%
public exploits
7
Exploit-DB

Summary

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Patch / fix

  • juniper junos 11.4
  • kernel-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
  • kernel-syms-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
  • kernel-rt_trace SLE Real Time 11 SP4 3.0.101.rt130-68.1
  • kernel-source-rt SLE Real Time 11 SP4 3.0.101.rt130-68.1
  • kernel-ec2 SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3, OpenStack Cloud 5 +2 more 3.0.101-0.47.96.1
  • kernel-pae SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3 3.0.101-0.47.96.1
  • kernel-xen SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3, OpenStack Cloud 5 +2 more 3.0.101-0.47.96.1
  • kernel-syms SLES 11 SP3-LTSS, SLE Point of Sale 11 SP3, OpenStack Cloud 5 +2 more 3.0.101-0.47.96.1

suse advisories SUSE-SU-2017:1102-1SUSE-SU-2017:0494-1SUSE-SU-2017:0437-1SUSE-SU-2017:0333-1

Timeline

  1. First public exploit (EDB-24030)
  2. Published

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
30 d ago

Exploit prediction

80.29% chance of exploitation in the next 30 days, higher than 99.6% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-24033 Multiple Vendor - TCP Sequence Number Approximation (4) remote, 2004-04-23
  • EDB-24032 Multiple Vendor - TCP Sequence Number Approximation (3) remote, 2004-04-20
  • EDB-24031 Multiple Vendor - TCP Sequence Number Approximation (2) remote, 2004-04-20
  • EDB-24030 Multiple Vendor - TCP Sequence Number Approximation (1) remote, 2004-03-05
  • EDB-942 Microsoft Windows - Malformed IP Options Denial of Service (MS05-019) dos, 2005-04-17
  • EDB-291 TCP Connection Reset - Remote Denial of Service dos, 2004-04-23
  • EDB-276 Microsoft Windows XP/2000 - TCP Connection Reset dos, 2004-04-22
  • securityfocus.com http://www.securityfocus.com/bid/10183 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.