ghsa-9q38-5hh6-p5gw
Vulnerability from github
Published
2022-05-24 16:54
Modified
2024-04-04 01:48
Severity
Details
Reuven Plevinsky and Tal Vainshtein of Check Point Software Technologies Ltd. discovered that OpenBSD kernel (all versions, including 6.5) can be forced to create long chains of TCP SACK holes that cause very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.
{ "affected": [], "aliases": [ "CVE-2019-8460" ], "database_specific": { "cwe_ids": [ "CWE-1049" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2019-08-26T20:15:00Z", "severity": "HIGH" }, "details": "Reuven Plevinsky and Tal Vainshtein of Check Point Software Technologies Ltd. discovered that OpenBSD kernel (all versions, including 6.5) can be forced to create long chains of TCP SACK holes that cause very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.", "id": "GHSA-9q38-5hh6-p5gw", "modified": "2024-04-04T01:48:13Z", "published": "2022-05-24T16:54:52Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-8460" }, { "type": "WEB", "url": "https://github.com/openbsd/src/commit/ed8fdce754a5d8d14c09e989d8877707bd43906f" }, { "type": "WEB", "url": "https://ftp.openbsd.org/pub/OpenBSD/patches/6.5/common/006_tcpsack.patch.sig" }, { "type": "WEB", "url": "https://research.checkpoint.com/tcp-sack-security-issue-in-openbsd-cve-2019-8460" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20190905-0001" }, { "type": "WEB", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-19-253-03" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
Loading...