10

CVE-2019-11683

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.0 < 5.0.13
Canonical ≫ Ubuntu Linux Version19.04
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.07% 0.934
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://usn.ubuntu.com/3979-1/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190517-0002/
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/05/02/1
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/05/05/4
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/108142
Third Party Advisory
VDB Entry
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.13
Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4dd2b82d5adfbe0b1587ccad7a8f76d826120f37
Patch
Vendor Advisory
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7CYLTCIRTKUB4R2TLLUYPZLDQL44OBG/
https://support.f5.com/csp/article/K69550896
Third Party Advisory
https://www.spinics.net/lists/netdev/msg568315.html
Patch
Third Party Advisory
Issue Tracking