besides that there is a never triggered drop rule for source "224.0.0.0/4" i doubt "Your machine crashed when it received a TCP packet that were coming from a multicast address" because the machinbe is fine

0     0 DROP       all  --  eth1   *       224.0.0.0/4          0.0.0.0/0
_______________________

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack.
Ergebnis zur Schwachstellenerkennung

Your machine crashed when it received a TCP packet that were coming
from a multicast address. This is known as the 'spank' denial of
service attack.

An attacker might use this flaw to shut down this server, thus
preventing you from working properly.

Solution: contact your operating system vendor for a patch.
Filter out multicast addresses (224.0.0.0/4)

An attacker might use this flaw to shut down this server and saturate your network, thus preventing you from working properly. This also could be used to run stealth scans against your machine.
Lösung

contact your operating system vendor for a patch. Filter out multicast addresses (224.0.0.0/4)
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to