Security news about TCP weakness

Message

Snake94 · #16 Post by **Snake94** » 2016-08-15 11:21

there is already an official patch for this?

Head_on_a_Stick · #17 Post by **Head_on_a_Stick** » 2016-08-15 20:06

^ https://git.zx2c4.com/linux/commit/?id= ... 33c551f758

Check your ACK limit, as described above, the patched kernel will have "1000" as the default value.

Head_on_a_Stick · #18 Post by **Head_on_a_Stick** » 2016-08-15 20:31

Nili · #19 Post by **Nili** » 2016-08-15 20:36

I have changed mine to value 1000 on 3.16 series.

sudo sysctl -w net.ipv4.tcp_challenge_ack_limit=1000

as a (root) nano /etc/sysctl.conf adding this code.

net.ipv4.tcp_challenge_ack_limit=1000

Value 100 confirmed by the above links that is default.
Thanks HoaS for new link update

Nili

Snake94 · #20 Post by **Snake94** » 2016-08-22 20:09

there is a patch for this:

https://github.com/torvalds/linux/commi ... 33c551f758

Why not yet been implemented in an update?

Debian User Forums