CVE-2019-11477

EPSS 98.75%
Veröffentlicht 19.06.2019 00:15:12
Zuletzt bearbeitet 21.11.2024 04:21:09
Quelle security@ubuntu.com
CVE-Watchlists
Login
Unerledigt
Login

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 32

NVD 91 VulnDex Vulnerability Enrichment 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 2.6.29 < 3.16.69

Linux ≫ Linux Kernel Version >= 3.17 < 4.4.182

Linux ≫ Linux Kernel Version >= 4.5 < 4.9.182

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.127

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.52

Linux ≫ Linux Kernel Version >= 4.20 < 5.1.11

F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Advanced Firewall Manager Version15.0.0

F5 ≫ Big-ip Access Policy Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Access Policy Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Access Policy Manager Version15.0.0

F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Application Acceleration Manager Version15.0.0

F5 ≫ Big-ip Link Controller Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Link Controller Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Link Controller Version15.0.0

F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Policy Enforcement Manager Version15.0.0

F5 ≫ Big-ip Webaccelerator Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Webaccelerator Version15.0.0

F5 ≫ Big-ip Application Security Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Application Security Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Application Security Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Application Security Manager Version15.0.0

F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Local Traffic Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Local Traffic Manager Version15.0.0

F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Fraud Protection Service Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Fraud Protection Service Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Fraud Protection Service Version15.0.0

F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Global Traffic Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Global Traffic Manager Version15.0.0

F5 ≫ Big-ip Analytics Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Analytics Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Analytics Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Analytics Version15.0.0

F5 ≫ Big-ip Edge Gateway Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Edge Gateway Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Edge Gateway Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Edge Gateway Version15.0.0

F5 ≫ Big-ip Domain Name System Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Domain Name System Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Domain Name System Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Domain Name System Version15.0.0

Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version18.10

Canonical ≫ Ubuntu Linux Version19.04

Redhat ≫ Enterprise Linux Atomic Host Version-

Redhat ≫ Enterprise Linux Version5.0

Redhat ≫ Enterprise Linux Version6.0

Redhat ≫ Enterprise Linux Version7.0

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Aus Version6.5

Redhat ≫ Enterprise Linux Aus Version6.6

Redhat ≫ Enterprise Linux Eus Version7.4

Redhat ≫ Enterprise Linux Eus Version7.5

Redhat ≫ Enterprise Mrg Version2.0

Ivanti ≫ Connect Secure Version-

Pulsesecure ≫ Pulse Policy Secure Version-

Pulsesecure ≫ Pulse Secure Virtual Application Delivery Controller Version-

F5 ≫ Traffix Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	98.75%	0.999

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C
security@ubuntu.com	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://www.oracle.com/security-alerts/cpujan2020.html

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/2

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/10/24/1

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/10/29/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/4

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html

Third Party Advisory

VDB Entry

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/20/3

Third Party Advisory

Mailing List

http://www.vmware.com/security/advisories/VMSA-2019-0010.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1594

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1602

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1699

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/tcpsack

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff

Patch

Vendor Advisory

Mailing List

https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

Patch

Third Party Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287

Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190625-0001/

Third Party Advisory

https://support.f5.com/csp/article/K78234183

Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic

Third Party Advisory

Mitigation

https://www.kb.cert.org/vuls/id/905115

Third Party Advisory

US Government Resource

https://www.synology.com/security/advisory/Synology_SA_19_28

Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-253-03

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2019-11477

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-11477

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-11477

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-11477