PT-2019-3099 · Openbsd · Openbsd Kernel

Publicado 2019-08-26 · Atualizado 2021-08-02 · CVE-2019-8460

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD kernel versions prior to 6.5

Description The issue exists due to insufficient input validation in the tcp sack option() function of the OpenBSD kernel. This can be exploited by a remote attacker to cause a denial of service. An attacker can force the kernel to create long chains of TCP SACK holes, leading to expensive calls to tcp sack option() for every incoming SACK packet.

Recommendations For OpenBSD kernel versions prior to 6.5, update to a version that includes a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-1049

CWE-20

Identificadores relacionados

BDU:2019-03082

CVE-2019-8460

Produtos afetados

Openbsd Kernel

Referências · 11

• 🔥 https://ftp.openbsd.org/pub/OpenBSD/patches/6.5/common/006_tcpsack.patch.sig · Exploit
• 🔥 https://research.checkpoint.com/tcp-sack-security-issue-in-openbsd-cve-2019-8460 · Exploit
• https://github.com/openbsd/src/commit/ed8fdce754a5d8d14c09e989d8877707bd43906f · Correção
• https://github.com/neex/phuip-fpizdam · Nota
• https://cxsecurity.com/cveshow/CVE-2019-8460 · Nota
• https://security.netapp.com/advisory/ntap-20190905-0001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-8460 · Nota de Segurança
• https://us-cert.cisa.gov/ics/advisories/icsa-19-253-03 · Nota
• https://osv.dev/vulnerability/CVE-2019-8460 · Aviso do Fabricante
• https://t.me/cybersecuritytechnologies/432 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-03082 · Nota de Segurança