FKIE_CVE-2024-39920

Vulnerability from fkie_nvd - Published: 2024-07-03 04:15 - Updated: 2024-11-21 09:28
Severity ?
4.3 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the "SnailLoad" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.
References
cve@mitre.orghttps://github.com/IAIK/SnailLoad
cve@mitre.orghttps://news.ycombinator.com/item?id=40809629
cve@mitre.orghttps://twitter.com/tugraz/status/1805272833322299412
cve@mitre.orghttps://www.instagram.com/p/C8wpO1UtExw/
cve@mitre.orghttps://www.rfc-editor.org/rfc/rfc9293.txt
cve@mitre.orghttps://www.snailload.com
cve@mitre.orghttps://www.snailload.com/snailload.pdf
cve@mitre.orghttps://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos
af854a3a-2127-422b-91ae-364da2661108https://github.com/IAIK/SnailLoad
af854a3a-2127-422b-91ae-364da2661108https://news.ycombinator.com/item?id=40809629
af854a3a-2127-422b-91ae-364da2661108https://twitter.com/tugraz/status/1805272833322299412
af854a3a-2127-422b-91ae-364da2661108https://www.instagram.com/p/C8wpO1UtExw/
af854a3a-2127-422b-91ae-364da2661108https://www.rfc-editor.org/rfc/rfc9293.txt
af854a3a-2127-422b-91ae-364da2661108https://www.snailload.com
af854a3a-2127-422b-91ae-364da2661108https://www.snailload.com/snailload.pdf
af854a3a-2127-422b-91ae-364da2661108https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the \"SnailLoad\" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number."
    },
    {
      "lang": "es",
      "value": "El protocolo TCP en RFC 9293 tiene un canal lateral de temporizaci\u00f3n que facilita a atacantes remotos inferir el contenido de una conexi\u00f3n TCP desde un sistema cliente (a cualquier servidor), cuando ese sistema cliente est\u00e1 obteniendo simult\u00e1neamente datos TCP a una velocidad lenta desde un servidor controlado por un atacante, tambi\u00e9n conocido como el problema \"SnailLoad\". Por ejemplo, el ataque puede comenzar midiendo los RTT a trav\u00e9s de los segmentos TCP cuya funci\u00f3n es proporcionar un bit de control ACK y un n\u00famero de reconocimiento."
    }
  ],
  "id": "CVE-2024-39920",
  "lastModified": "2024-11-21T09:28:34.183",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-07-03T04:15:04.267",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "https://github.com/IAIK/SnailLoad"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://news.ycombinator.com/item?id=40809629"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://twitter.com/tugraz/status/1805272833322299412"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.instagram.com/p/C8wpO1UtExw/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.snailload.com"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.snailload.com/snailload.pdf"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/IAIK/SnailLoad"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://news.ycombinator.com/item?id=40809629"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://twitter.com/tugraz/status/1805272833322299412"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.instagram.com/p/C8wpO1UtExw/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.rfc-editor.org/rfc/rfc9293.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.snailload.com"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.snailload.com/snailload.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.tugraz.at/en/tu-graz/services/news-stories/tu-graz-news/singleview/article/neue-sicherheitsluecke-erlaubt-ueberwachung-besuchter-websites-und-angesehener-videos"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-1255"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.