JVN#20930118: FreeBSD vulnerable to denial-of-service (DoS)

FreeBSD contains a denial-of-service (DoS) vulnerability (CWE-400) due to improper handling of TSopt on TCP connections.

Impact

A remote attacker may be able to cause a denial-of-service (DoS) condition.

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.
This vulnerability was fixed in 2006 September 25 by the following FreeBSD commit.

• commit 4dc630cdd2f7a790604d2724ecb19c6aa95130a7
• Author: John-Mark Gurney <[email protected]>
• Date: Mon Sep 25 07:22:39 2006 +0000

Products Affected

• FreeBSD versions prior to 7.0