SACK Panic – Multiple TCP-based remote denial-of-service issues

Post by strcat » Wed, Jun 19, 2019, 10:17 PM UTC

Droobfest wrote: post #125

mkj wrote: post #101

Will any Android phones be affected, or they don't support segment offloading?

Android seems to be affected: https://android.googlesource.com/kernel/common/+/5d625e9b4a6... This might be fun... Edit: Don't know if segmentation offloading is on by default in Android, but on my default Arch kernel it is, so I wouldn't know why not.

Post by gravitas » Thu, Jun 20, 2019, 2:33 PM UTC

endeja wrote: post #131

gravitas wrote: post #18

I'm collecting vendor links internally for work: Red Hat / CentOS https://access.redhat.com/security/vulnerabilities/tcpsack https://access.redhat.com/security/cve/cve-2019-11477 https://access.redhat.com/security/cve/cve-2019-11478 https://access.redhat.com/security/cve/cve-2019-11479 Ubuntu https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2... h…

Here's the info from F5 Networks: https://support.f5.com/csp/article/K78234183 https://support.f5.com/csp/article/K26618426 https://support.f5.com/csp/article/K35421172