Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jun 2019 07:57:09 -0700
From:      hiren <hiren@strugglingcoder.info>
To:        mike tancsa <mike@sentex.net>
Cc:        "freebsd-security@freebsd.org" <freebsd-security@freebsd.org>
Subject:   Re: TCP SACK (CVE-2019-5599)
Message-ID:  <20190618145709.GI52008@strugglingcoder.info>
In-Reply-To: <29d6e221-e88a-f828-0e5b-ac235691ed86@sentex.net>
References:  <29d6e221-e88a-f828-0e5b-ac235691ed86@sentex.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--huBJOJF9BsF479P6
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 06/18/19 at 10:33P, mike tancsa wrote:
> Hi all,
> With respect to the bugs describe in
> https://github.com/Netflix/security-bulletins/blob/master/advisories/thir=
d-party/2019-001.md
> *<quote>
>       SACK Slowness (FreeBSD 12 using the RACK TCP Stack)
[snip]
>=20
> *</quote>*
>=20
> *How does I know if this is enabled in my default kernel on RELENG_12 ?
> There is some vague mention in various forums this is not the default on
> FreeBSD ? Can anyone shed more light as to how this does/does not impact
> FreeBSD ?

RACK is one of the tcp stacks ($src/sys/netinet/tcp_stacks) and not
enabled by default.

So, by default, FreeBSD is not affected, afaict. This advisory is for
when you do use RACK.

Cheers,
Hiren

--huBJOJF9BsF479P6
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=LTTn
-----END PGP SIGNATURE-----

--huBJOJF9BsF479P6--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20190618145709.GI52008>