vulnerability

FreeBSD: VID-c294c2e6-b309-11e9-a87f-a4badb2f4699 (CVE-2019-5599): FreeBSD -- Resource exhaustion in non-default RACK TCP stack

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jul 30, 2019
Added
Jul 31, 2019
Modified
Dec 10, 2025

Description

Problem Description: While processing acknowledgements, the RACK code uses several linked lists to maintain state entries. A malicious attacker can cause the lists to grow unbounded. This can cause an expensive list traversal on every packet being processed, leading to resource exhaustion and a denial of service. Impact: An attacker with the ability to send specially crafted TCP traffic to a victim system can degrade network performance and/or consume excessive CPU by exploiting the inefficiency of traversing the potentially very large RACK linked lists with relatively small bandwidth cost.

Solution

freebsd-upgrade-base-12_0-release-p6
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.