| Package | Affected versions | Patched versions |
|---|---|---|
| vm server | = 3.3= 3.4 |
net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free