CVE-2016-6828

The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service tcpxmitretransmitqueue use-after-free and system crash via a crafted SACK option...

CVE-2016-6828

The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service tcpxmitretransmitqueue use-after-free and system crash via a crafted SACK option...

CVE-2016-6828

The vulnerability CVE-2016-6828 affects the Linux kernel and is triggered by a local attacker exploiting a use-after-free in the TCP transmit path. Specifically, the tcp_check_send_head path in include/net/tcp.h leaves SACK state in an inconsistent condition after a failed data copy, enabling a l...

CVE-2016-6828: Use After Free

The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service tcpxmitretransmitqueue use-after-free and system crash via a crafted SACK option...

CVE-2016-6828

The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service tcpxmitretransmitqueue use-after-free and system crash via a crafted SACK option...

UBUNTU-CVE-2016-6828

The tcpchecksendhead function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a failed data copy, which allows local users to cause a denial of service tcpxmitretransmitqueue use-after-free and system crash via a crafted SACK option...

Snort <= 2.4.0 SACK TCP Option Error Handling Denial of Service Exploit

No description provided by source...

wireshark: DoS (infinite loop) in the SCTP dissector (wnpa-sec-2012-33)

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

UBUNTU-CVE-2012-6056

Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissector in Wireshark 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted Duplicate TSN count...

Microsoft Windows TCP/IP Could Allow Remote Code Execution (974145)

This host is missing a critical security update according to Microsoft Bulletin MS10-009. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows TCP/IP栈选择性应答远程拒绝服务漏洞（MS10-009）

BUGTRAQ ID: 38064 CVE ID: CVE-2010-0242 Microsoft Windows是微软发布的非常流行的操作系统。 Windows的TCP/IP栈在处理设置了畸形选择性应答（SACK）值的TCP报文时存在拒绝服务漏洞，远程攻击者可以向目标系统发送少量的特制报文导致受影响的系统停止响应和自动重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Vista Microsoft Windows Server 2008 SP2 Microsoft Windows...

CVE-2010-0242

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2010-0242: Undefined Security Weakness

The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service system hang via crafted packets with malformed TCP selective acknowledgement SACK values, aka "TCP/IP Selective Acknowledgement Vulnerability."...

CVE-2006-0433

Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...

CVE-2006-0433

CVE-2006-0433 : The FreeBSD vulnerability concerns the TCP/IP stack, where the SACK (Selective Acknowledgement) handling in FreeBSD 5.3 and 5.4 can enter an infinite loop when there is insufficient memory to process an incoming selective acknowledgement, allowing a remote attacker to cause a deni...

CVE-2006-0433

Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...

FreeBSD Security Advisory FreeBSD-SA-06:08.sack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.sack Security Advisory The FreeBSD Project Topic: Infinite loop in SACK handling Category: core Module: netinet Announced: 2006-02-01 Credits: Scott Wood...

CVE-2006-0433: Undefined Security Weakness

Selective Acknowledgement SACK in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service infinite loop...

FreeBSD TCP selective acknowledgment DoS

Bug in TCP SACK Selective Acknowledgment implementation leads to infinit root inside kernel...

FreeBSD-SA-06:08.sack

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:08.sack Security Advisory The FreeBSD Project Topic: Infinite loop in SACK handling Category: core Module: netinet Announced: 2006-02-01 Credits: Scott Wood...