The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Freebsd | Freebsd | 3.0 (including) | 3.0 (including) |
| Freebsd | Freebsd | 3.0-releng (including) | 3.0-releng (including) |
| Freebsd | Freebsd | 3.1 (including) | 3.1 (including) |
| Freebsd | Freebsd | 3.2 (including) | 3.2 (including) |
| Freebsd | Freebsd | 3.3 (including) | 3.3 (including) |
| Freebsd | Freebsd | 3.4 (including) | 3.4 (including) |
| Freebsd | Freebsd | 3.5 (including) | 3.5 (including) |
| Freebsd | Freebsd | 3.5-stable (including) | 3.5-stable (including) |
| Freebsd | Freebsd | 3.5.1 (including) | 3.5.1 (including) |
| Freebsd | Freebsd | 3.5.1-release (including) | 3.5.1-release (including) |
| Freebsd | Freebsd | 3.5.1-stable (including) | 3.5.1-stable (including) |
| Freebsd | Freebsd | 4.0 (including) | 4.0 (including) |
| Freebsd | Freebsd | 4.0-alpha (including) | 4.0-alpha (including) |
| Freebsd | Freebsd | 4.0-releng (including) | 4.0-releng (including) |
| Freebsd | Freebsd | 4.1 (including) | 4.1 (including) |
| Freebsd | Freebsd | 4.1.1 (including) | 4.1.1 (including) |
| Freebsd | Freebsd | 4.1.1-release (including) | 4.1.1-release (including) |
| Freebsd | Freebsd | 4.1.1-stable (including) | 4.1.1-stable (including) |
| Freebsd | Freebsd | 4.2 (including) | 4.2 (including) |
| Freebsd | Freebsd | 4.2-stable (including) | 4.2-stable (including) |
| Freebsd | Freebsd | 4.3 (including) | 4.3 (including) |
| Freebsd | Freebsd | 4.3-release (including) | 4.3-release (including) |
| Freebsd | Freebsd | 4.3-release_p38 (including) | 4.3-release_p38 (including) |
| Freebsd | Freebsd | 4.3-releng (including) | 4.3-releng (including) |
| Freebsd | Freebsd | 4.3-stable (including) | 4.3-stable (including) |
| Freebsd | Freebsd | 4.4 (including) | 4.4 (including) |
| Freebsd | Freebsd | 4.4-release_p42 (including) | 4.4-release_p42 (including) |
| Freebsd | Freebsd | 4.4-releng (including) | 4.4-releng (including) |
| Freebsd | Freebsd | 4.4-stable (including) | 4.4-stable (including) |
| Freebsd | Freebsd | 4.5 (including) | 4.5 (including) |
| Freebsd | Freebsd | 4.5-release (including) | 4.5-release (including) |
| Freebsd | Freebsd | 4.5-release_p32 (including) | 4.5-release_p32 (including) |
| Freebsd | Freebsd | 4.5-releng (including) | 4.5-releng (including) |
| Freebsd | Freebsd | 4.5-stable (including) | 4.5-stable (including) |
| Freebsd | Freebsd | 4.6 (including) | 4.6 (including) |
| Freebsd | Freebsd | 4.6-release (including) | 4.6-release (including) |
| Freebsd | Freebsd | 4.6-release_p20 (including) | 4.6-release_p20 (including) |
| Freebsd | Freebsd | 4.6-releng (including) | 4.6-releng (including) |
| Freebsd | Freebsd | 4.6-stable (including) | 4.6-stable (including) |
| Freebsd | Freebsd | 4.6.2 (including) | 4.6.2 (including) |
| Freebsd | Freebsd | 4.7 (including) | 4.7 (including) |
| Freebsd | Freebsd | 4.7-release (including) | 4.7-release (including) |
| Freebsd | Freebsd | 4.7-release_p17 (including) | 4.7-release_p17 (including) |
| Freebsd | Freebsd | 4.7-releng (including) | 4.7-releng (including) |
| Freebsd | Freebsd | 4.7-stable (including) | 4.7-stable (including) |
| Freebsd | Freebsd | 4.8 (including) | 4.8 (including) |
| Freebsd | Freebsd | 4.8-pre-release (including) | 4.8-pre-release (including) |
| Freebsd | Freebsd | 4.8-release_p6 (including) | 4.8-release_p6 (including) |
| Freebsd | Freebsd | 4.8-releng (including) | 4.8-releng (including) |
| Freebsd | Freebsd | 4.9 (including) | 4.9 (including) |
| Freebsd | Freebsd | 4.9-pre-release (including) | 4.9-pre-release (including) |
| Freebsd | Freebsd | 5.0 (including) | 5.0 (including) |
| Freebsd | Freebsd | 5.0-alpha (including) | 5.0-alpha (including) |
| Freebsd | Freebsd | 5.0-release_p14 (including) | 5.0-release_p14 (including) |
| Freebsd | Freebsd | 5.0-releng (including) | 5.0-releng (including) |
| Freebsd | Freebsd | 5.1 (including) | 5.1 (including) |
| Freebsd | Freebsd | 5.1-release_p5 (including) | 5.1-release_p5 (including) |
| Freebsd | Freebsd | 5.1-releng (including) | 5.1-releng (including) |
| Freebsd | Freebsd | 5.2 (including) | 5.2 (including) |