PT-2019-3099 · Openbsd · Openbsd Kernel

Published 2019-08-26 · Updated 2021-08-02 · CVE-2019-8460

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions OpenBSD kernel versions prior to 6.5

Description The issue exists due to insufficient input validation in the tcp sack option() function of the OpenBSD kernel. This can be exploited by a remote attacker to cause a denial of service. An attacker can force the kernel to create long chains of TCP SACK holes, leading to expensive calls to tcp sack option() for every incoming SACK packet.

Recommendations For OpenBSD kernel versions prior to 6.5, update to a version that includes a fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-1049

CWE-20

Related Identifiers

BDU:2019-03082

CVE-2019-8460

Affected Products

Openbsd Kernel

References · 11

• 🔥 https://ftp.openbsd.org/pub/OpenBSD/patches/6.5/common/006_tcpsack.patch.sig · Exploit
• 🔥 https://research.checkpoint.com/tcp-sack-security-issue-in-openbsd-cve-2019-8460 · Exploit
• https://github.com/openbsd/src/commit/ed8fdce754a5d8d14c09e989d8877707bd43906f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-8460 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8460 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03082 · Security Note
• https://github.com/neex/phuip-fpizdam · Note
• https://cxsecurity.com/cveshow/CVE-2019-8460 · Note
• https://security.netapp.com/advisory/ntap-20190905-0001 · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-19-253-03 · Note
• https://t.me/cybersecuritytechnologies/432 · Telegram Post