CVE-2019-8460 is a vulnerability in OpenBSD
Published on August 26, 2019
OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.
Weakness Type
Excessive Data Query Operations in a Large Data Table
The software performs a data query with a large number of joins and sub-queries on a large data table.
Products Associated with CVE-2019-8460
Want to know whenever a new CVE is published for OpenBSD? stack.watch will email you.
Exploit Probability
EPSS
0.69%
Percentile
71.46%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.