Severity: Unknown
Affected Package: kernel
Summary: TCP reassembly resource exhaustion
The introduction of VNET converted the global limit on the number of segments allowed in reassembly queues into a per-VNET limit. Because mbufs are allocated from a global pool, with a sufficient number of VNETs the total number of mbufs attached to reassembly queues could grow to consume all mbufs in the system, at which point all network traffic would cease. Fix obtained from FreeBSD 8.
No specific recommendations provided.
Aliases: CVE-2015-1417
Published: July 28, 2015
Last Modified: July 28, 2015