Date: Tue, 18 Jun 2019 07:57:09 -0700 From: hiren <hiren@strugglingcoder.info> To: mike tancsa <mike@sentex.net> Cc: "freebsd-security@freebsd.org" <freebsd-security@freebsd.org> Subject: Re: TCP SACK (CVE-2019-5599) Message-ID: <20190618145709.GI52008@strugglingcoder.info> In-Reply-To: <29d6e221-e88a-f828-0e5b-ac235691ed86@sentex.net> References: <29d6e221-e88a-f828-0e5b-ac235691ed86@sentex.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--huBJOJF9BsF479P6 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 06/18/19 at 10:33P, mike tancsa wrote: > Hi all, > With respect to the bugs describe in > https://github.com/Netflix/security-bulletins/blob/master/advisories/thir= d-party/2019-001.md > *<quote> > SACK Slowness (FreeBSD 12 using the RACK TCP Stack) [snip] >=20 > *</quote>* >=20 > *How does I know if this is enabled in my default kernel on RELENG_12 ? > There is some vague mention in various forums this is not the default on > FreeBSD ? Can anyone shed more light as to how this does/does not impact > FreeBSD ? RACK is one of the tcp stacks ($src/sys/netinet/tcp_stacks) and not enabled by default. So, by default, FreeBSD is not affected, afaict. This advisory is for when you do use RACK. Cheers, Hiren --huBJOJF9BsF479P6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGTBAABCgB9FiEEpOIPodh4jz8X5m8Ci5JQ4VY+3+UFAl0I+8JfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEE0 RTIwRkExRDg3ODhGM0YxN0U2NkYwMjhCOTI1MEUxNTYzRURGRTUACgkQi5JQ4VY+ 3+VCwggApQi+zNlHF9fjbzHi+ksRQYB1HgdiQNVD8cCr2MqJ5PuNzR02fVPYNHWy HfluMRMQZdRiflaoRHs+oxVe/G1icIuepAIvjDFX1DSfy+EtwBm8SySDWRzrTyFf SypUigOs/EplPx0E2DfMSHDNbJzOf7WtYggE8e0KjHh2IVKTBFVg3q3300xQoNv1 abS0r9fsF2aldLul2Lns80nfwfR8rZ9tLXs8IxTGJ0FV4QXqAeuJMq6Dtm6e85en jgKqZyrXX6fecB2IDX04u/HmSQjTKzjbf3zI5mboYNgnQH5U052deve2zXUc+Igp 62dg7g0VYrgnQ+2Yb7vsxf+SE92x+g== =LTTn -----END PGP SIGNATURE----- --huBJOJF9BsF479P6--
Want to link to this message? Use this URL: <https://docs.FreeBSD.org/cgi/mid.cgi?20190618145709.GI52008>