MNBSD-2015-6: TCP reassembly resource exhaustion

Severity: Unknown

Affected Package: kernel

Summary: TCP reassembly resource exhaustion

Description

The introduction of VNET converted the global limit on the number of segments allowed in reassembly queues into a per-VNET limit. Because mbufs are allocated from a global pool, with a sufficient number of VNETs the total number of mbufs attached to reassembly queues could grow to consume all mbufs in the system, at which point all network traffic would cease. Fix obtained from FreeBSD 8.

Affected Versions

kernel

Recommendations

No specific recommendations provided.

References

Additional Information

Aliases: CVE-2015-1417

Published: July 28, 2015
Last Modified: July 28, 2015