RFC 5927: ICMP Attacks against TCP

In plain English — editorial summary, not part of the RFC

This document discusses the use of the Internet Control Message Protocol (ICMP) to perform a variety of attacks against the Transmission Control Protocol (TCP). Additionally, this document describes a number of widely implemented modifications to TCP's handling of ICMP error messages that help to mitigate these issues. This document is not an Internet Standards Track specification; it is published for informational purposes.

Document record

Document ID

RFC5927

Published

July 2010

Authors

F. Gont

Status

INFORMATIONAL

Stream

IETF

Area

wit

Pages

36

Also known as

—

• Read the full RFC text →
• Plain text version
• IETF Datatracker history
• DOI: 10.17487/RFC5927
• Reported errata exist →

Topics

• vulnerability
• blind attacks
• connection-reset attack
• performance-degrading attack
• throughput-reduction attack
• source quench
• PMTUD
• Path-MTU Discovery
• ICMP Destination Unreachable

Related documents

Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.

• RFC 5961Improving TCP's Robustness to Blind In-Window AttacksUpdated

  August 2010

• RFC 6056Recommendations for Transport-Protocol Port RandomizationCurrent

  January 2011

• RFC 8899Packetization Layer Path MTU Discovery for Datagram TransportsCurrent

  September 2020

• RFC 9869Datagram Packetization Layer Path MTU Discovery (DPLPMTUD) for UDP OptionsCurrent

  October 2025

• RFC 4821Packetization Layer Path MTU DiscoveryUpdated

  March 2007

• RFC 7203An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity InformationCurrent

  April 2014

• RFC 7739Security Implications of Predictable Fragment Identification ValuesCurrent

  February 2016

• RFC 9268IPv6 Minimum Path MTU Hop-by-Hop OptionCurrent

  August 2022

Also filed under

• INFORMATIONAL
• 2010
• IETF stream
• wit area