7.5

CVE-2019-11478

SACK can cause extensive memory use via fragmented resend queue

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.4.182
Linux ≫ Linux Kernel Version >= 4.5 < 4.9.182
Linux ≫ Linux Kernel Version >= 4.10 < 4.14.127
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.52
Linux ≫ Linux Kernel Version >= 4.20 < 5.1.11
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Access Policy Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Access Policy Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Access Policy Manager Version15.0.0
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Link Controller Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Link Controller Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Link Controller Version15.0.0
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Webaccelerator Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Webaccelerator Version15.0.0
F5 ≫ Big-ip Application Security Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Application Security Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Application Security Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Local Traffic Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Local Traffic Manager Version15.0.0
F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Fraud Protection Service Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Fraud Protection Service Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Global Traffic Manager Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Global Traffic Manager Version15.0.0
F5 ≫ Big-ip Analytics Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Analytics Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Analytics Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Analytics Version15.0.0
F5 ≫ Big-ip Edge Gateway Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Edge Gateway Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Edge Gateway Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Edge Gateway Version15.0.0
F5 ≫ Big-ip Domain Name System Version >= 11.5.2 <= 11.6.4
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.4
F5 ≫ Big-ip Domain Name System Version >= 13.1.0 <= 13.1.1
F5 ≫ Big-ip Domain Name System Version >= 14.0.0 <= 14.1.0
F5 ≫ Big-ip Domain Name System Version15.0.0
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.10
Canonical ≫ Ubuntu Linux Version19.04
Redhat ≫ Enterprise Linux Version5.0
Redhat ≫ Enterprise Linux Version6.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Aus Version6.5
Redhat ≫ Enterprise Linux Aus Version6.6
Redhat ≫ Enterprise Linux Eus Version7.4
Redhat ≫ Enterprise Linux Eus Version7.5
Redhat ≫ Enterprise Mrg Version2.0
Ivanti ≫ Connect Secure Version-
F5 ≫ Traffix Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 94.69% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
security@ubuntu.com 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
http://www.openwall.com/lists/oss-security/2019/06/28/2
http://www.openwall.com/lists/oss-security/2019/10/24/1
http://www.openwall.com/lists/oss-security/2019/10/29/3
http://www.openwall.com/lists/oss-security/2019/07/06/3
http://www.openwall.com/lists/oss-security/2019/07/06/4
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html
Third Party Advisory
VDB Entry
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt
http://www.vmware.com/security/advisories/VMSA-2019-0010.html
https://access.redhat.com/errata/RHSA-2019:1594
https://access.redhat.com/errata/RHSA-2019:1602
https://access.redhat.com/errata/RHSA-2019:1699
https://access.redhat.com/security/vulnerabilities/tcpsack
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md
Patch
Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193
Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10287
https://security.netapp.com/advisory/ntap-20190625-0001/
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic
Third Party Advisory
Mitigation
https://www.kb.cert.org/vuls/id/905115
https://www.synology.com/security/advisory/Synology_SA_19_28
https://www.us-cert.gov/ics/advisories/icsa-19-253-03
http://packetstormsecurity.com/files/154408/Kernel-Live-Patch-Security-Notice-LSN-0055-1.html
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=f070ef2ac66716357066b683fb0baf55f8191a2e
Patch
Vendor Advisory
Mailing List
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0007
https://seclists.org/bugtraq/2019/Jul/30
https://support.f5.com/csp/article/K26618426
Third Party Advisory