CVE-2004-0171: Freebsd

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

Affected products

• Freebsd Freebsd: version 4.6.2 only; version 4.7 only; version 4.8 only; version 4.9 only; version 5.0 only; version 5.1 only; …
• OpenBSD OpenBSD: version 3.3 only; version 3.4 only

Published 2004-03-15. Last modified 2026-06-16.