VxWorks TCP Stack Malformed Options Denial of Service

A denial-of-service vulnerability exists in VxWorks TCP stack, for Wind River VxWorks versions 6.6 through vx7. Whenever a TCP packet with malformed options is received, the SEQ and ACK numbers are not being checked, and a RST on the connection is immediately issued. By spoofing the source IP address and bruteforcing the source port number space 1024 through 65535, an attacker may send packets to a server in order to cause resets DoS on established TCP connections.