MNBSD-2015-5: TCP LAST_ACK state denial of service

Description

A bug caused TCP connections transitioning to the LAST_ACK state to get stuck. A remote attacker could exploit this to exhaust resources and cause a denial of service.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-15:13.tcp.asc
• https://www.cve.org/CVERecord?id=CVE-2015-5358

Additional Information

Aliases: CVE-2015-5358

Published: July 22, 2015
Last Modified: July 22, 2015