Windows Systems Vulnerable to FragmentSmack DoS Bug

More from: | Bleeping Computer |
0

Microsoft released a security advisory about a denial-of-service vulnerability that renders multiple versions of Windows completely unresponsive and has no mitigation factors.

Tagged with the identification number CVE-2018-5391, the bug received the moniker FragmentSmack because it responds to IP fragmentation, a process that adjusts the packet size to fit the maximum transmission unit (MTU) at the receiving end.

IP fragmentation attacks are a known form of denial of service, where the victim computer receives multiple IP packets of a smaller size that are expected to be reassembled into their original form at the destination.

FragmentSmack is a TCP fragmentation type of attack that prevents reassembling the packets on the recipient end.

“An attacker could send many 8-byte sized IP fragments

(...)

Read full article » https://www.bleepingcomputer.com/news/security/windows-systems-vulnerable-to-fragmentsmack-dos-bug/


About | Bleeping Computer |

Bleeping Computer® is a technical support site and a self-education tool for the novice user to learn basic concepts about Computer Technology. Our focus is to allow the novice computer user to be able to have a place that they can come and discuss computer/technology problems with their peers and at the same time have a rich resource in which to learn the "basics" about computers and technology.

We have found, with our extensive experience in helping users, whether they be family, friends, coworkers, or clients, that most technical support problems lie not with the computer, but with the fact that the user does not know the "basic concepts" that underlie all issues of computing. These concepts include hardware, files and folders, operating systems, Internet, and applications.

»Twitter: @BleepinComputer »Facebook: @BleepingComputer »YouTube: BleepingComputer