CVE-2019-11478

MEDIUMMonitor

Published:Jun 19, 2019(6 years ago)

Modified:Nov 21, 2024

Remote ExploitNo Auth RequiredNo InteractionLow Complexity

Vulnerability Description

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
linux	linux_kernel	4.4.182	-
linux	linux_kernel	4.5 - 4.9.182	-
linux	linux_kernel	4.10 - 4.14.127

Timeline

Published
CVE disclosed publicly
Jun 19, 20196 years ago
Last Modified
Most recent update
Nov 21, 20241 year ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security...Third Party Advisory
http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security...
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security...

CVSS Score

v3.1

5.3/ 10.0

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

At a Glance

Affected Products

References

linux / linux_kernel

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt

http://www.openwall.com/lists/oss-security/2019/06/28/2

http://www.openwall.com/lists/oss-security/2019/07/06/3

http://www.openwall.com/lists/oss-security/2019/07/06/4

http://www.openwall.com/lists/oss-security/2019/10/24/1

http://www.openwall.com/lists/oss-security/2019/10/29/3

http://www.vmware.com/security/advisories/VMSA-2019-0010.html

https://access.redhat.com/errata/RHSA-2019:1594

https://access.redhat.com/errata/RHSA-2019:1602

https://access.redhat.com/errata/RHSA-2019:1699

https://access.redhat.com/security/vulnerabilities/tcpsackThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?...Mailing List

https://github.com/Netflix/security-bulletins/blob/master/advisories/t...Patch

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0007

https://seclists.org/bugtraq/2019/Jul/30

https://security.netapp.com/advisory/ntap-20190625-0001/

https://support.f5.com/csp/article/K26618426Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanicMitigation

https://www.kb.cert.org/vuls/id/905115

https://www.oracle.com/security-alerts/cpujan2020.html

https://www.oracle.com/security-alerts/cpuoct2020.html

https://www.synology.com/security/advisory/Synology_SA_19_28

https://www.us-cert.gov/ics/advisories/icsa-19-253-03

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security...Third Party Advisory

http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security...

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security...

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt

http://www.openwall.com/lists/oss-security/2019/06/28/2

http://www.openwall.com/lists/oss-security/2019/07/06/3

http://www.openwall.com/lists/oss-security/2019/07/06/4

http://www.openwall.com/lists/oss-security/2019/10/24/1

http://www.openwall.com/lists/oss-security/2019/10/29/3

http://www.vmware.com/security/advisories/VMSA-2019-0010.html

https://access.redhat.com/errata/RHSA-2019:1594

https://access.redhat.com/errata/RHSA-2019:1602

https://access.redhat.com/errata/RHSA-2019:1699

https://access.redhat.com/security/vulnerabilities/tcpsackThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?...Mailing List

https://github.com/Netflix/security-bulletins/blob/master/advisories/t...Patch

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0007

https://seclists.org/bugtraq/2019/Jul/30

https://security.netapp.com/advisory/ntap-20190625-0001/

https://support.f5.com/csp/article/K26618426Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanicMitigation

https://www.kb.cert.org/vuls/id/905115

https://www.oracle.com/security-alerts/cpujan2020.html

https://www.oracle.com/security-alerts/cpuoct2020.html

https://www.synology.com/security/advisory/Synology_SA_19_28

https://www.us-cert.gov/ics/advisories/icsa-19-253-03

CVSS v3 Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges RequiredNone

User InteractionNone

Impact

ScopeUnchanged

ConfidentialityNone

IntegrityNone

AvailabilityLow

Impact Analysis

ConfidentialityNone

NoneLowHigh

IntegrityNone

NoneLowHigh

AvailabilityLow

NoneLowHigh

CVE-2019-11478

✦ Vulnerability Description

Attack Characteristics

Affected Software

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

Vulnerability Description