Project

General

Profile

Actions

Security #4512

closed

Evasion possibility on wrong/unexpected ACK value in crafted SYN packets

Added by Jeff Lucovsky over 1 year ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
Target version:
Affected Versions:
Label:
Git IDs:

54ebee6f516f983a21d952ec6cf4292ed8ba9d8d

Severity:
CRITICAL

Description

affected versions: all

Please see the pcap attached.
Basically it logs no HTTP even with midstream enabled.

The problem is the first packet right away as it has ACK value that we check and disregard the whole flow/session.But Windows and Linux accept those and everyone else it seems.

Please also see attached a test case(py file) and a patch by Eric.

The pcap can not be shared or made public except of the devs with access to this issue of course.


Files


Related issues 1 (0 open1 closed)

Copied from Security #4504: tcp: Evasion possibility on wrong/unexpected ACK value in crafted SYN packetsClosedEric LeblondActions
Actions #1

Updated by Jeff Lucovsky over 1 year ago

  • Copied from Security #4504: tcp: Evasion possibility on wrong/unexpected ACK value in crafted SYN packets added
Actions #2

Updated by Shivani Bhardwaj over 1 year ago

  • Status changed from New to In Review
  • Assignee changed from Shivani Bhardwaj to Victor Julien
Actions #3

Updated by Victor Julien over 1 year ago

  • Status changed from In Review to Closed
Actions #4

Updated by Victor Julien over 1 year ago

  • Priority changed from High to Normal
  • CVE set to 2021-35063
  • Git IDs updated (diff)
  • Severity set to CRITICAL
Actions #5

Updated by Victor Julien over 1 year ago

  • Private changed from Yes to No
Actions

Also available in: Atom PDF