AMNESIA:33 and FreeBSD TCP/IP stack involvement

Hartmann, O. ohartmann at walstatt.org
Wed Dec 9 05:58:59 UTC 2020


Hello,
I've got a question about recently discovered serious vulnerabilities
in certain TCP stack implementations, designated as AMNESIA:33 (as far
as I could follow the recently made announcements and statements,
please see, for instance,
https://www.zdnet.com/article/amnesia33-vulnerabilities-impact-millions-of-smart-and-industrial-devices/).

All mentioned open-source TCP stacks seem not to be related in any way
with freeBSD or any derivative of the FreeBSD project, but I do not
dare to make a statement about that.

My question is very simple and aimes towards calming down my employees
requests: is FreeBSD potentially vulnerable to this newly discovered
flaw (we use mainly 12.1-RELENG, 12.2-RELENG, 12-STABLE and 13-CURRENT,
latest incarnations, of course, should be least vulnerable ...).

Thanks in advance,

O. Hartmann
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20201209/1c095167/attachment.sig>


More information about the freebsd-current mailing list