MNBSD-2015-15: TCP MD5 signature handling denial of service

Description

A programming error in processing a TCP connection using both the TCP_MD5SIG and TCP_NOOPT socket options could lead to a kernel crash. An attacker or local application able to establish such a connection could panic the system, resulting in a denial of service.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

• https://www.freebsd.org/security/advisories/FreeBSD-SA-16:05.tcp.asc
• https://www.cve.org/CVERecord?id=CVE-2016-1882

Additional Information

Aliases: CVE-2016-1882

Published: October 01, 2015
Last Modified: October 01, 2015