4.3
Medium
CVE-2024-39920 The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of…
Description
The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the "SnailLoad" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.
Affected products and versions
References
- www.snailload.com www.snailload.com
- www.snailload.com www.snailload.com
- github.com github.com
- www.rfc-editor.org www.rfc-editor.org
- www.tugraz.at www.tugraz.at
- twitter.com twitter.com
- news.ycombinator.com news.ycombinator.com
- www.instagram.com www.instagram.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated