TCP SACK Panic — Kernel vulnerabilities leading to remote denial of service
Netflix employees discovered three vulnerabilities in the TCP network stack code. The most serious vulnerability allows a remote attacker to trigger a kernel panic. Several CVE identifiers were attached to these issues: CVE-2019-11477 is classified as a significant vulnerability, while CVE-2019-11478 and CVE-2019-11479 are deemed moderate. The first two vulnerabilities relate to SACK (Selective Acknowledgment) and MSS (Maximum […]
