For the vulnerability called TCP SACK panic([1], [2], [3], and many more): is there a proof of concept code out there that can be used to test vulnerability status and effectiveness of remedies?

[1] https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

[2] https://access.redhat.com/security/vulnerabilities/tcpsack

[3] https://isc.sans.edu/diary/What+You+Need+To+Know+About+TCP+%22SACK+Panic%22/25046

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.