阿里云漏洞库

漏洞描述

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt
ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc
http://kb.juniper.net/JSA10638
http://marc.info/?l=bugtraq&m=108302060014745&w=2
http://marc.info/?l=bugtraq&m=108506952116653&w=2
http://secunia.com/advisories/11440
http://secunia.com/advisories/11458
http://secunia.com/advisories/22341
http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml
http://www.kb.cert.org/vuls/id/415294
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.osvdb.org/4030
http://www.securityfocus.com/archive/1/449179/100/0/threaded
http://www.securityfocus.com/bid/10183
http://www.uniras.gov.uk/vuls/2004/236929/index.htm
http://www.us-cert.gov/cas/techalerts/TA04-111A.html
http://www.vupen.com/english/advisories/2006/3983
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064
https://exchange.xforce.ibmcloud.com/vulnerabilities/15886
https://kc.mcafee.com/corporate/index?page=content&id=SB10053
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	mcafee	network_data_loss_prevention	*		Up to (including) 8.6
	运行在以下环境
	应用	mcafee	network_data_loss_prevention	9.2.0	-
	运行在以下环境
	应用	mcafee	network_data_loss_prevention	9.2.1	-
	运行在以下环境
	应用	mcafee	network_data_loss_prevention	9.2.2	-
	运行在以下环境
	应用	openpgp	openpgp	2.6.2	-
	运行在以下环境
	系统	debian_10	linux	*		Up to (including) 4.19.249-2
	运行在以下环境
	系统	debian_11	linux	*		Up to (including) 5.10.197-1
	运行在以下环境
	系统	debian_12	linux	*		Up to (including) 6.1.55-1
	运行在以下环境
	系统	debian_9	linux	*		Up to (including) 4.9.228-1
	运行在以下环境
	系统	juniper	junos	*	-
	运行在以下环境
	系统	netbsd	netbsd	1.5	-
	运行在以下环境
	系统	netbsd	netbsd	1.5.1	-
	运行在以下环境
	系统	netbsd	netbsd	1.5.2	-
	运行在以下环境
	系统	netbsd	netbsd	1.5.3	-
	运行在以下环境
	系统	netbsd	netbsd	1.6	-
	运行在以下环境
	系统	netbsd	netbsd	1.6.1	-
	运行在以下环境
	系统	netbsd	netbsd	1.6.2	-
	运行在以下环境
	系统	netbsd	netbsd	2.0	-
	运行在以下环境
	系统	oracle	solaris	10	-
	运行在以下环境
	系统	oracle	solaris	11	-
	运行在以下环境
	系统	suse_11	kernel-default	*		Up to (excluding) 3.0.101-0.7.53
	运行在以下环境
	系统	suse_11_SP4	kernel	*		Up to (excluding) 3.0.101-94.1
	运行在以下环境
	系统	xinuos	openserver	5.0.6	-
	运行在以下环境
	系统	xinuos	openserver	5.0.7	-
	运行在以下环境
	系统	xinuos	unixware	7.1.1	-
	运行在以下环境
	系统	xinuos	unixware	7.1.3	-

攻击路径

远程
攻击复杂度

容易
权限要求

无需权限
影响范围

有限影响
EXP成熟度

POC 已公开
补丁情况

官方补丁
数据保密性

无影响
数据完整性

传输被破坏
服务器危害

DoS
全网数量

N/A

CWE-ID	漏洞类型
NVD-CWE-Other

低危 Microsoft Windows - Malformed IP Options Denial of Service (MS05-019)

漏洞描述

解决建议

参考链接

受影响软件情况