CVE-2019-8460CWE-1049

OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming…

published August 26, 2019

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02191 · 81.2th percentile
Weakness
CWE-1049 · Excessive Data Query Operations in a Large Data Table
Published
2019-08-26T19:18Z
EPSS history
Timeline
  • 26 AUG 19:18Z
    OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming…
    cvelistv5