CVE-2019-11477

HIGHScheduled

Published:Jun 19, 2019(6 years ago)

Modified:Nov 21, 2024

Remote ExploitNo Auth RequiredNo InteractionLow Complexity

Vulnerability Description

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
linux	linux_kernel	2.6.29 - 3.16.69	-
linux	linux_kernel	3.17 - 4.4.182	-
linux	linux_kernel	4.5 - 4.9.182

Timeline

Published
CVE disclosed publicly
Jun 19, 20196 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security...Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security...Third Party Advisory
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txtThird Party Advisory

CVSS Score

v3.1

7.5/ 10.0

HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

At a Glance

Affected Products

References

linux / linux_kernel

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-...Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/20/3Mailing List

http://www.openwall.com/lists/oss-security/2019/06/28/2Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/3Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/4Mailing List

http://www.openwall.com/lists/oss-security/2019/10/24/1Mailing List

http://www.openwall.com/lists/oss-security/2019/10/29/3Mailing List

http://www.vmware.com/security/advisories/VMSA-2019-0010.htmlThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:1594Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1602Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1699Third Party Advisory

https://access.redhat.com/security/vulnerabilities/tcpsackThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdfThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?...Mailing List

https://github.com/Netflix/security-bulletins/blob/master/advisories/t...Patch

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006Third Party Advisory

https://security.netapp.com/advisory/ntap-20190625-0001/Third Party Advisory

https://support.f5.com/csp/article/K78234183Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanicMitigation

https://www.kb.cert.org/vuls/id/905115Third Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.htmlThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory

https://www.synology.com/security/advisory/Synology_SA_19_28Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-253-03Third Party Advisory

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security...Third Party Advisory

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security...Third Party Advisory

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txtThird Party Advisory