Project

General

Profile

Actions
Copy link

Bug #3844

closed

tcp: possible bypass with TCP ssn reuse

Added by Victor Julien over 5 years ago. Updated 28 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Victor Julien
Target version:
8.0.1
Affected Versions:
8.0.0
Effort:
Difficulty:
Label:

Description

Scenario:

client: TCP SYN packet 1
server: RST with 'broken ACK' (so ACK field non-zero while ACK flag not set)
client: TCP SYN packet 2
...

The 2nd SYN packet is not considered for TCP ssn reuse as the "state" of the session is not progressed enough.

So the SYNs with their odd RSTs seem to trigger a condition where the apparently valid session following it is not picked up.

Subtasks 1 (0 open — 1 closed)

Bug #7876: tcp: possible bypass with TCP ssn reuse (7.0.x backport)ClosedVictor JulienActions
Actions
Copy link
 #1

Updated by Philippe Antoine over 2 years ago

  • Target version set to 8.0.0-beta1
Actions
Copy link
 #2

Updated by Victor Julien 10 months ago

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1
Actions
Copy link
 #3

Updated by Victor Julien 5 months ago

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1
Actions
Copy link
 #4

Updated by Philippe Antoine 4 months ago

  • Affected Versions 8.0.0 added
Actions
Copy link
 #5

Updated by Victor Julien about 2 months ago

  • Status changed from Assigned to In Progress
  • Target version changed from 9.0.0-beta1 to 8.0.1
  • Label Needs backport to 7.0 added
Actions
Copy link
 #6

Updated by OISF Ticketbot about 2 months ago

  • Subtask #7876 added
Actions
Copy link
 #7

Updated by OISF Ticketbot about 2 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #8

Updated by Victor Julien about 2 months ago

  • Status changed from In Progress to In Review
Actions
Copy link
 #9

Updated by Victor Julien about 2 months ago

  • Status changed from In Review to Resolved
Actions
Copy link
 #10

Updated by Victor Julien about 1 month ago

  • Status changed from Resolved to Closed
Actions
Copy link
 #11

Updated by Victor Julien 28 days ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF