CVE-2025-56233
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-29

Last updated on: 2025-10-28

Assigner: MITRE

Description
Openindiana, kernel SunOS 5.11 has a denial of service vulnerability. For the processing of TCP packets with RST or SYN flag set, Openindiana has a wide acceptable range of sequence numbers. It does not require the sequence number to exactly match the next expected sequence value, just to be within the current receive window, which violates RFC5961. This flaw allows attackers to send multiple random TCP RST/SYN packets to hit the acceptable range of sequence numbers, thereby interrupting normal connections and causing a denial of service attack.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-29
Last Modified
2025-10-28
Generated
2026-05-07
AI Q&A
2025-09-29
EPSS Evaluated
2026-05-05
NVD
CVE-2025-56233
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
openindiana kernel 5.11
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Openindiana kernel SunOS 5.11 where the system accepts a wide range of TCP sequence numbers for packets with RST or SYN flags set, instead of requiring an exact match to the next expected sequence number as specified by RFC5961. Attackers can exploit this by sending multiple random TCP RST or SYN packets that fall within the acceptable sequence number range, causing interruptions in normal TCP connections and resulting in a denial of service.


How can this vulnerability impact me? :

The vulnerability can be exploited by attackers to disrupt normal TCP connections by sending crafted TCP RST or SYN packets that fall within the acceptable sequence number range. This leads to denial of service attacks, causing interruptions or unavailability of network services relying on TCP connections.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart