The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.
Conclusion & alert: CVE-2005-3675 is rated High Risk (65.7/100): CVSS High severity, with medium exploitation likelihood (EPSS 5.45%). Core evidence: EPSS rose +3.05% over the last day, indicating growing attacker interest. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2025-12-31 | 2.40% | 5.45% | +3.05% |
| 2 | 2025-04-20 | 2.00% | 2.40% | +0.40% |
| 3 | 2025-03-30 | — | 2.00% | — |
Full EPSS history (10 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 7.8 | 2.0 | HIGH |
|
10.0 | 6.9 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
ubuntu
|
negligible | CVE-2005-3675 negligible priority: Ubuntu has no source package entries, 0 status rows across 0 suites (none): no status rows. | https://ubuntu.com/security/CVE-2005-3675 |
| URL | Tags |
|---|---|
| http://www.cs.umd.edu/~capveg/optack/optack-extended.pdf | |
| http://www.kb.cert.org/vuls/id/102014 | Third Party Advisory US Government Resource |
| http://www.securityfocus.com/bid/15468/ | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/23055 |