Re: AMNESIA:33 and FreeBSD TCP/IP stack involvement
"Kurt Buff, GSEC/GCIH/PCIP" <[email protected]>
| Newsgroups | gmane.os.freebsd.security.general,gmane.os.freebsd.current |
|---|---|
| Message-ID | <CADy1Ce4jEsqBn1EEYk_H1cXC9RX-ASRCd=2-Ooh48_y68d=LQw@mail.gmail.com> |
Recently seen: https://treck.com/vulnerability-response-information/ and https://github.com/Forescout/project-memoria-detector HTH, Kurt On Tue, Dec 8, 2020 at 10:59 PM Hartmann, O. <[email protected]> wrote: > > Hello, > I've got a question about recently discovered serious vulnerabilities > in certain TCP stack implementations, designated as AMNESIA:33 (as far > as I could follow the recently made announcements and statements, > please see, for instance, > https://www.zdnet.com/article/amnesia33-vulnerabilities-impact-millions-of-smart-and-industrial-devices/). > > All mentioned open-source TCP stacks seem not to be related in any way > with freeBSD or any derivative of the FreeBSD project, but I do not > dare to make a statement about that. > > My question is very simple and aimes towards calming down my employees > requests: is FreeBSD potentially vulnerable to this newly discovered > flaw (we use mainly 12.1-RELENG, 12.2-RELENG, 12-STABLE and 13-CURRENT, > latest incarnations, of course, should be least vulnerable ...). > > Thanks in advance, > > O. Hartmann _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[email protected]"