CVE-2004-0230

Medium

Published: 18/08/2004(UTC)Updated: 09/10/2026(UTC)Translated: 10/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

80.29%

100th percentile - higher than 100% of all known CVEs

Summary

A TCP vulnerability where, when using a large Window Size, remote attackers can more easily guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting TCP RST packets. This especially affects protocols that use long-lived connections, such as BGP.

Risk Assessment

Attackers can remotely tear down critical long-lived connections (e.g., BGP sessions), causing network connectivity loss and routing disruptions. This can lead to service unavailability and destabilization of network infrastructure.

Recommendation

Implement protections against RST injection, such as randomized sequence numbers, session encryption (e.g., MD5/TCP-AO for BGP), and traffic filtering. Consider updating or reconfiguring systems to mitigate the vulnerability.

Other vulnerabilities in TCP

CVE-1999-0077Medium
Predictable TCP sequence numbers allow for connection spoofing.

Original NVD description (English source)

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS