description: OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to tcp_sack_option() for every incoming SACK packet which can lead to a denial of service.
problem types: CWE-1049
affected:
{
product: OpenBSD
vendor: n/a
versions:
status: affected, version: All, including latest - 6.5
}