0xkol/rfc6056-device-tracker

0xkol/rfc6056-device-tracker

GitHubGitHub
GitHubgithub.com
Releases0
Stars16
An implementation of a device tracking technique based on Algorithm 4 (Double-Hash Port Selection) of RFC 6056.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-32296↗
3.3 LOW2.1 LOW

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 ("Double-Hash Port Selection Algorithm") of RFC 6056.