CVE-2019-8460

2019-08-2619:18:49

CWE-1049

checkpoint

www.cve.org

EPSS

0.004

Percentile

73.3%

JSON

OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.

CNA Affected

[
  {
    "product": "OpenBSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All, including latest - 6.5"
      }
    ]
  }
]