Nexusguard Blog
Cybersecurity best practices and DDoS defence strategies
Latest Stories
Featured Stories
Blog Home
A vulnerability known as “SegmentSmack” was recently discovered in Linux kernels of versions 4.9 or later. An attacker can exploit this vulnerability by remotely sending specially crafted TCP packets to prompt resource-intensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() via open ports, causing CPU saturation and ultimately achieving a denial-of-service (DoS) effect.
It is confirmed that all Nexusguard services are not affected by the vulnerability. We are also working with our vendors on the patching of a few non-critical systems they supply. We recommend customers running affected Linux kernels to apply the patches from the following links:
https://lkml.org/lkml/2018/7/28/40 (Linux 4.9.116)
https://lkml.org/lkml/2018/7/28/44 (Linux 4.17.11)
Email Subscription
Thank You!
We will get back to you shortly.
Popular Stories
Mitigating the record-setting Memcached DDoS attacks
Mar 02, 2018
Popular Tags
DDoS Cyber Attack Cybersecurity Amplification Attack DDoS Mitigation Malware Memcached Attack Vulnerabilities Botnet DDoS Protection IoT Ransom Satori 4Chan Anarchy Attack Target Banking and Finance Bash Big Data Analytics Bitcoin Blackhat CSP CVE-2018-5390 Class-C Clean Pipe DDoS Simulation Platform Data Privacy Data Protection Device Limitations Fatal Blow Financial Sector Forecast G20 Summit GDPR ISP Lethal Problems Linux Kernel Meltdown Mirai Multi-vector attack Mumsnet Network Breach Nexusguard Partner Program Origin Protection Patch Pentagon Potential Problem Infrastructures RCE Vulnerability Replay Attacks SSDP SegmentSmack Shellshock Spectre TCP SYN flood Torshammer Trojan Turkish General Election Ukrainian Presidential Election Wordpress World Cup zero-day attack
A vulnerability known as “SegmentSmack” was recently discovered in Linux kernels of versions 4.9 or later. An attacker can exploit this vulnerability by remotely sending specially crafted TCP packets to prompt resource-intensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() via open ports, causing CPU saturation and ultimately achieving a denial-of-service (DoS) effect.
Comments Form: