News for hackers. Stuff that matters.

A comment on SACK Panic – Multiple TCP-based remote denial-of-service issues. Parent comment

Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by ilkkao on Monday June 17, 2019 @03:13PM (#20206352)
The original link includes links to the patches. Fascinating how the SACK MSS problem seems to be a relatively simple situation nobody realized can occur.
[ Parent | on HN ]
Re:SACK Panic – Multiple TCP-based remote denial-of-service ... by jandrese on Monday June 17, 2019 @04:15PM (#20206859)
You'd have to dig pretty deep to realize that the kernel structure is limited to just 17 entries, and then do the math with minimum packet sizes vs. header sizes.
[ Parent | on HN ]