https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-3675.htmlhttps://patchthecve.com/cve/CVE-2005-3675.htmlTue, 16 Jun 2026 22:17:24 +0000HIGH 7.8: The Transmission Control Protocol (TCP) allows remote attackers to cause a denial of service (bandwidth consumption) by sending ACK messages for packets that have not yet been received (optimistic ACKs), which can cause the sender to increase its transmission rate until it fills available bandwidth.https://patchthecve.com/cve/CVE-2005-0065.htmlhttps://patchthecve.com/cve/CVE-2005-0065.htmlTue, 16 Jun 2026 22:10:26 +0000HIGH 10.0: The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka "TCP sequence number checking"), which makes it easier for attackers to forge ICMP error messages for specifichttps://patchthecve.com/cve/CVE-2005-0068.htmlhttps://patchthecve.com/cve/CVE-2005-0068.htmlTue, 16 Jun 2026 22:10:26 +0000MEDIUM 5.0: The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged "Destihttps://patchthecve.com/cve/CVE-2005-0067.htmlhttps://patchthecve.com/cve/CVE-2005-0067.htmlTue, 16 Jun 2026 22:10:26 +0000MEDIUM 5.0: The original design of TCP does not require that port numbers be assigned randomly (aka "Port randomization"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with fohttps://patchthecve.com/cve/CVE-2005-0066.htmlhttps://patchthecve.com/cve/CVE-2005-0066.htmlTue, 16 Jun 2026 22:10:26 +0000MEDIUM 5.0: The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka "TCP acknowledgement number checking"), which makes it easier for attackehttps://patchthecve.com/cve/CVE-2004-1060.htmlhttps://patchthecve.com/cve/CVE-2004-1060.htmlTue, 16 Jun 2026 22:06:55 +0000MEDIUM 5.0: Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, ak