CVE-2019-11477

EPSS 98.75%
Veröffentlicht 19.06.2019 00:15:12
Zuletzt bearbeitet 21.11.2024 04:21:09
Erkennungen
Login

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 32

NVD 91 VulnDex Vulnerability Enrichment 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linux ≫ Linux Kernel Version >= 2.6.29 < 3.16.69

Linux ≫ Linux Kernel Version >= 3.17 < 4.4.182

Linux ≫ Linux Kernel Version >= 4.5 < 4.9.182

Linux ≫ Linux Kernel Version >= 4.10 < 4.14.127

Linux ≫ Linux Kernel Version >= 4.15 < 4.19.52

Linux ≫ Linux Kernel Version >= 4.20 < 5.1.11

F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Advanced Firewall Manager Version 15.0.0

F5 ≫ Big-ip Access Policy Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Access Policy Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Access Policy Manager Version 15.0.0

F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Application Acceleration Manager Version 15.0.0

F5 ≫ Big-ip Link Controller Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Link Controller Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Link Controller Version 15.0.0

F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Policy Enforcement Manager Version 15.0.0

F5 ≫ Big-ip Webaccelerator Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Webaccelerator Version 15.0.0

F5 ≫ Big-ip Application Security Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Application Security Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Application Security Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Application Security Manager Version 15.0.0

F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Local Traffic Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Local Traffic Manager Version 15.0.0

F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Fraud Protection Service Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Fraud Protection Service Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Fraud Protection Service Version 15.0.0

F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Global Traffic Manager Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Global Traffic Manager Version 15.0.0

F5 ≫ Big-ip Analytics Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Analytics Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Analytics Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Analytics Version 15.0.0

F5 ≫ Big-ip Edge Gateway Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Edge Gateway Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Edge Gateway Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Edge Gateway Version 15.0.0

F5 ≫ Big-ip Domain Name System Version >= 11.5.2 <= 11.6.4

F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.4

F5 ≫ Big-ip Domain Name System Version >= 13.1.0 <= 13.1.1

F5 ≫ Big-ip Domain Name System Version >= 14.0.0 <= 14.1.0

F5 ≫ Big-ip Domain Name System Version 15.0.0

Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 14.04 SwEdition esm

Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts

Canonical ≫ Ubuntu Linux Version 18.10

Canonical ≫ Ubuntu Linux Version 19.04

Redhat ≫ Enterprise Linux Atomic Host Version -

Redhat ≫ Enterprise Linux Version 5.0

Redhat ≫ Enterprise Linux Version 6.0

Redhat ≫ Enterprise Linux Version 7.0

Redhat ≫ Enterprise Linux Version 8.0

Redhat ≫ Enterprise Linux Aus Version 6.5

Redhat ≫ Enterprise Linux Aus Version 6.6

Redhat ≫ Enterprise Linux Eus Version 7.4

Redhat ≫ Enterprise Linux Eus Version 7.5

Redhat ≫ Enterprise Mrg Version 2.0

Ivanti ≫ Connect Secure Version -

Pulsesecure ≫ Pulse Policy Secure Version -

Pulsesecure ≫ Pulse Secure Virtual Application Delivery Controller Version -

F5 ≫ Traffix Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	98.75%	0.999

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C
Canonical	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://www.oracle.com/security-alerts/cpujan2020.html

Third Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/2

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/10/24/1

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/10/29/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/3

Third Party Advisory

Mailing List

http://www.openwall.com/lists/oss-security/2019/07/06/4

Third Party Advisory

Mailing List

http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html

Third Party Advisory

VDB Entry

http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html

Third Party Advisory

VDB Entry

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/20/3

Third Party Advisory

Mailing List

http://www.vmware.com/security/advisories/VMSA-2019-0010.html

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1594

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1602

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1699

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/tcpsack

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf

Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff

Patch

Vendor Advisory

Mailing List

https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

Patch

Third Party Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193

Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287

Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006

Third Party Advisory

https://security.netapp.com/advisory/ntap-20190625-0001/

Third Party Advisory

https://support.f5.com/csp/article/K78234183

Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic

Third Party Advisory

Mitigation

https://www.kb.cert.org/vuls/id/905115

Third Party Advisory

US Government Resource

https://www.synology.com/security/advisory/Synology_SA_19_28

Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-253-03

Third Party Advisory

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2019-11477

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-11477

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-11477

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-11477