Description
Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).
References
- ADV-2006-0409 vdb-entry
- 22861 vdb-entry
- 16466 vdb-entry
- 1015566 vdb-entry
- 399 third-party-advisory
- bsd-sack-handling-dos(24453) vdb-entry
- 18696 third-party-advisory