CVE-2019-11477

Home/CVE/Jonathan Looney discovered that the TCP_SKB_CB(skb)-tcp_gso_segs value was subject to an integer overflow in the Linux k

CVE

Jonathan Looney discovered that the TCP_SKB_CB(skb)-tcp_gso_segs value was subject to an integer overflow in the Linux k

Jonathan Looney discovered that the TCP_SKB_CB(skb)-tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

HIGH · CVSS 7.5 EPSS 0.69918

Act now

EPSS ≥ 0.50 - high probability of exploitation in the next 30 days
EPSS percentile: top 1% of all CVEs by exploitation likelihood
Public exploit or PoC is available
CVSS base score ≥ 7.0

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-190Integer Overflow or Wraparound

▤

Affected Products & Versions

linux kernel>= 2.6.29 and < 3.16.69
linux kernel>= 3.17 and < 4.4.182
linux kernel>= 4.5 and < 4.9.182
linux kernel>= 4.10 and < 4.14.127
linux kernel>= 4.15 and < 4.19.52
linux kernel>= 4.20 and < 5.1.11
f5 big-ip advanced firewall manager>= 11.5.2 and <= 11.6.4
f5 big-ip advanced firewall manager>= 12.1.0 and <= 12.1.4
Show all 60 affected productsf5 big-ip advanced firewall manager>= 13.1.0 and <= 13.1.1
f5 big-ip advanced firewall manager>= 14.0.0 and <= 14.1.0
f5 big-ip advanced firewall managerall versions
f5 big-ip access policy manager>= 11.5.2 and <= 11.6.4
f5 big-ip access policy manager>= 12.1.0 and <= 12.1.4
f5 big-ip access policy manager>= 13.1.0 and <= 13.1.1
f5 big-ip access policy manager>= 14.0.0 and <= 14.1.0
f5 big-ip access policy managerall versions
f5 big-ip application acceleration manager>= 11.5.2 and <= 11.6.4
f5 big-ip application acceleration manager>= 12.1.0 and <= 12.1.4
f5 big-ip application acceleration manager>= 13.1.0 and <= 13.1.1
f5 big-ip application acceleration manager>= 14.0.0 and <= 14.1.0
f5 big-ip application acceleration managerall versions
f5 big-ip link controller>= 11.5.2 and <= 11.6.4
f5 big-ip link controller>= 12.1.0 and <= 12.1.4
f5 big-ip link controller>= 13.1.0 and <= 13.1.1
f5 big-ip link controller>= 14.0.0 and <= 14.1.0
f5 big-ip link controllerall versions
f5 big-ip policy enforcement manager>= 11.5.2 and <= 11.6.4
f5 big-ip policy enforcement manager>= 12.1.0 and <= 12.1.4
f5 big-ip policy enforcement manager>= 13.1.0 and <= 13.1.1
f5 big-ip policy enforcement manager>= 14.0.0 and <= 14.1.0
f5 big-ip policy enforcement managerall versions
f5 big-ip webaccelerator>= 11.5.2 and <= 11.6.4
f5 big-ip webaccelerator>= 12.1.0 and <= 12.1.4
f5 big-ip webaccelerator>= 13.1.0 and <= 13.1.1
f5 big-ip webaccelerator>= 14.0.0 and <= 14.1.0
f5 big-ip webacceleratorall versions
f5 big-ip application security manager>= 11.5.2 and <= 11.6.4
f5 big-ip application security manager>= 12.1.0 and <= 12.1.4
f5 big-ip application security manager>= 13.1.0 and <= 13.1.1
f5 big-ip application security manager>= 14.0.0 and <= 14.1.0
f5 big-ip application security managerall versions
f5 big-ip local traffic manager>= 11.5.2 and <= 11.6.4
f5 big-ip local traffic manager>= 12.1.0 and <= 12.1.4
f5 big-ip local traffic manager>= 13.1.0 and <= 13.1.1
f5 big-ip local traffic manager>= 14.0.0 and <= 14.1.0
f5 big-ip local traffic managerall versions
f5 big-ip fraud protection service>= 11.5.2 and <= 11.6.4
f5 big-ip fraud protection service>= 12.1.0 and <= 12.1.4
f5 big-ip fraud protection service>= 13.1.0 and <= 13.1.1
f5 big-ip fraud protection service>= 14.0.0 and <= 14.1.0
f5 big-ip fraud protection serviceall versions
f5 big-ip global traffic manager>= 11.5.2 and <= 11.6.4
f5 big-ip global traffic manager>= 12.1.0 and <= 12.1.4
f5 big-ip global traffic manager>= 13.1.0 and <= 13.1.1
f5 big-ip global traffic manager>= 14.0.0 and <= 14.1.0
f5 big-ip global traffic managerall versions
f5 big-ip analytics>= 11.5.2 and <= 11.6.4
f5 big-ip analytics>= 12.1.0 and <= 12.1.4
f5 big-ip analytics>= 13.1.0 and <= 13.1.1
f5 big-ip analytics>= 14.0.0 and <= 14.1.0

⚠

Public Exploits & PoCs

pocpacketstormsecurity.com · Kernel-Live-Patch-Security-Notice-LSN-0052-1.htmlpacketstormsecurity.com

pocpacketstormsecurity.com · Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlpacketstormsecurity.com

▣

Scoring & Timeline

7.5

HIGH · CVSS v3.1 · security@ubuntu.com

View on NVD

Attack Vector

Network Adjacent Local Physical

Attack Complexity

Low High

Privileges Required

None Low High

User Interaction

None Required

Scope

Unchanged Changed

Confidentiality

None Low High

Integrity

None Low High

Availability

None Low High

Published to NVD19 Jun 2019 · 12:15 AM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

⚑

Vendor Advisories

suse-csafopenSUSE-SU-2024:10728-1
suse-csafopenSUSE-SU-2024:13704-1
suse-csafSUSE-SU-2019:2950-1
suse-csafSUSE-SU-2019:2821-1
suse-csafSUSE-SU-2019:2658-1
Show all 30 vendor advisoriessuse-csafSUSE-SU-2019:2450-1
suse-csafSUSE-SU-2019:2430-1
siemens-csafSSA-462066
suse-csafSUSE-SU-2019:1924-1
suse-csafSUSE-SU-2019:1948-1
suse-csafSUSE-SU-2019:1882-1
suse-csafSUSE-SU-2019:1888-1
suse-csafSUSE-SU-2019:1889-1
suse-csafSUSE-SU-2019:1692-1
suse-csafSUSE-SU-2019:1668-1
suse-csafSUSE-SU-2019:1671-1
suse-csafSUSE-SU-2019:1674-1
rhsaRHSA-2019:1699Important
suse-csafSUSE-SU-2019:1581-1
suse-csafSUSE-SU-2019:1588-1
suse-csafopenSUSE-SU-2019:1571-1
suse-csafopenSUSE-SU-2019:1579-1
suse-csafSUSE-SU-2019:14089-1
suse-csafSUSE-SU-2019:1550-1
usnUSN-4017-1
usnUSN-4017-2
rhsaRHSA-2019:1486Important
rhsaRHSA-2019:1485Important
rhsaRHSA-2019:1484Important
rhsaRHSA-2019:1594Important

🔗

References & Sources

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txtThird Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-enThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/20/3Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/2Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/07/06/3Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/07/06/4Mailing ListThird Party Advisory

Show all 25 references

http://www.openwall.com/lists/oss-security/2019/10/24/1Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/10/29/3Mailing ListThird Party Advisory

http://www.vmware.com/security/advisories/VMSA-2019-0010.htmlThird Party Advisory

https://access.redhat.com/errata/RHSA-2019:1602Third Party Advisory

https://access.redhat.com/security/vulnerabilities/tcpsackThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdfThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cffMailing ListPatchVendor Advisory

https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.mdPatchThird Party Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193Third Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10287Third Party Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006Third Party Advisory

https://security.netapp.com/advisory/ntap-20190625-0001/Third Party Advisory

https://support.f5.com/csp/article/K78234183Third Party Advisory

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanicMitigationThird Party Advisory

https://www.kb.cert.org/vuls/id/905115Third Party AdvisoryUS Government Resource

https://www.oracle.com/security-alerts/cpujan2020.htmlThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.htmlThird Party Advisory

https://www.synology.com/security/advisory/Synology_SA_19_28Third Party Advisory

https://www.us-cert.gov/ics/advisories/icsa-19-253-03Third Party AdvisoryUS Government Resource

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin