ID:2679 - Exploit for Resource exhaustion in OpenBSD - CVE-2019-8460

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an error when processing TCP SACK packets. A remote attacker can force the system to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet.

Successful exploitation of the vulnerability may result in a denial of service (DoS) attack.

Remediation