9.8
CVE-2019-18805
- EPSS 0.57%
- Veröffentlicht 07.11.2019 14:15:11
- Zuletzt bearbeitet 21.11.2024 04:33:36
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 4.4 < 4.4.180
Linux ≫ Linux Kernel Version >= 4.9 < 4.9.172
Linux ≫ Linux Kernel Version >= 4.14 < 4.14.115
Linux ≫ Linux Kernel Version >= 4.19 < 4.19.38
Linux ≫ Linux Kernel Version >= 5.0 < 5.0.11
Linux ≫ Linux Kernel Version5.1 Updaterc1
Linux ≫ Linux Kernel Version5.1 Updaterc2
Linux ≫ Linux Kernel Version5.1 Updaterc3
Linux ≫ Linux Kernel Version5.1 Updaterc4
Linux ≫ Linux Kernel Version5.1 Updaterc5
Linux ≫ Linux Kernel Version5.1 Updaterc6
Linux ≫ Linux Kernel Version5.1 Updaterc7
Redhat ≫ Enterprise Linux Version7.0
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Netapp ≫ Data Availability Services Version-
Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.60.3
Netapp ≫ Hci Management Node Version-
Netapp ≫ Steelstore Cloud Integrated Storage Version-
Netapp ≫ Hci Compute Node Version-
Netapp ≫ Hci Storage Node Version-
Broadcom ≫ Fabric Operating System Version-
Netapp ≫ Aff A700s Firmware Version-
Netapp ≫ Fas8300 Firmware Version-
Netapp ≫ Fas8700 Firmware Version-
Netapp ≫ Aff A400 Firmware Version-
Netapp ≫ H610s Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.57% | 0.676 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.