Comment 2 for bug 1934917

Revision history for this message
Jeremy Stanley (fungi) wrote :

What i'm missing here to be able to determine whether this represents an exploitable security vulnerability is some indication of how this would be caused or predicted by an attacker. All the scenarios you describe seem to result in additional traffic being blocked or established connections getting dropped, so at most this could represent a denial of service condition I suppose, assuming an unprivileged or otherwise unintended party can force it to occur.

If this doesn't seem to be directly exploitable, we should switch the report to public at the earliest opportunity.