Cloudanix VulnDB

CVE-2019-11478

High · 7.5

CVSS

7.5

EPSS

94.7%

Published

Jun 19, 2019

CISA due date

—

The record

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 linux 0 4.19.37-4
Debian:12 linux 0 4.19.37-4
Debian:13 linux 0 4.19.37-4
Debian:8 linux 0 3.16.68-2
Debian:8 linux-4.9 0 4.9.168-1+deb9u3~deb8u1
Debian:9 linux 0 4.9.168-1+deb9u3
Mageia:6 kernel 0 4.14.127-1.mga6
Mageia:6 kernel-linus 0 4.14.127-1.mga6
Mageia:6 kernel-tmb 0 4.14.127-1.mga6
Mageia:6 kernel-userspace-headers 0 4.14.127-1.mga6
Mageia:6 kmod-vboxadditions 0 6.0.8-4.mga6
Mageia:6 kmod-virtualbox 0 6.0.8-4.mga6
Mageia:6 kmod-xtables-addons 0 2.13-88.mga6
Mageia:6 wireguard-tools 0 0.0.20190601-1.mga6
Red Hat:enterprise_linux:6::client kernel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-abi-whitelists 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-bootwrapper 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debug 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-i686 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-ppc64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-s390x 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-x86_64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-doc 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-firmware 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-headers 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client python-perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::client python-perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-abi-whitelists 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-bootwrapper 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-i686 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-ppc64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-s390x 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-x86_64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-doc 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-firmware 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-headers 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode python-perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::computenode python-perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-abi-whitelists 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-bootwrapper 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debug 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-i686 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-ppc64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-s390x 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-x86_64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-doc 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-firmware 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-headers 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server python-perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::server python-perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-abi-whitelists 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-bootwrapper 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-i686 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-ppc64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-s390x 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-x86_64 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-doc 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-firmware 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-headers 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-devel 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation python-perf 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:6::workstation python-perf-debuginfo 0 0:2.6.32-754.15.3.el6
Red Hat:enterprise_linux:7::client bpftool 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-abi-whitelists 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-bootwrapper 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debug 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debug-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debug-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-s390x 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-x86_64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-doc 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-headers 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-kdump 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-kdump-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-kdump-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-tools 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-tools-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client perf 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client perf-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client python-perf 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::client python-perf-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode bpftool 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-abi-whitelists 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-bootwrapper 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debug 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-s390x 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-x86_64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-doc 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-headers 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-tools 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode perf 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode perf-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode python-perf 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::computenode python-perf-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::hypervisor redhat-release-virtualization-host 0 0:4.2-11.1.el7
Red Hat:enterprise_linux:7::hypervisor redhat-release-virtualization-host 0 0:4.3.4-1.el7ev
Red Hat:enterprise_linux:7::hypervisor redhat-release-virtualization-host-content 0 0:4.2-11.1.el7
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host 0 0:4.2-20190618.0.el7_6
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host 0 0:4.3.4-20190620.3.el7_6
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host-image-update 0 0:4.2-20190618.0.el7_6
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host-image-update 0 0:4.3.4-20190620.3.el7_6
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host-image-update-placeholder 0 0:4.2-11.1.el7
Red Hat:enterprise_linux:7::hypervisor redhat-virtualization-host-image-update-placeholder 0 0:4.3.4-1.el7ev
Red Hat:enterprise_linux:7::server bpftool 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-abi-whitelists 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-abi-whitelists 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-alt 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-bootwrapper 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-bootwrapper 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debug 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debug 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debug-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debug-debuginfo 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debug-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debug-devel 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64le 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-s390x 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-x86_64 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-devel 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-doc 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-doc 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-headers 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-headers 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-kdump 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-kdump-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-kdump-devel 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-tools 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-tools 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-tools-debuginfo 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-tools-debuginfo 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-tools-libs 0 0:3.10.0-957.21.3.el7
Red Hat:enterprise_linux:7::server kernel-tools-libs 0 0:4.14.0-115.8.2.el7a
Red Hat:enterprise_linux:7::server kernel-tools-libs-devel 0 0:3.10.0-957.21.3.el7

Related vulnerabilities