CVE-2019-11477

7.5

HIGH

Linux TCP SACK Integer Overflow Denial of Service

Description

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

INFO

Published Date :

June 19, 2019, 12:15 a.m.

Last Modified :

Feb. 27, 2024, 9:04 p.m.

Source :

[email protected]

Remotely Exploitable :

Yes !

Impact Score :

3.6

Exploitability Score :

3.9 Public PoC/Exploit Available at Github

CVE-2019-11477 has a 13 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2019-11477 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID	Vendor	Product
1	F5	big-ip_access_policy_manager
2	F5	big-ip_advanced_firewall_manager
3	F5	big-ip_analytics
4	F5	big-ip_application_acceleration_manager
5	F5	big-ip_application_security_manager
6	F5	big-ip_domain_name_system
7	F5	big-ip_fraud_protection_service
8	F5	big-ip_global_traffic_manager
9	F5	big-ip_link_controller
10	F5	big-ip_local_traffic_manager
11	F5	big-ip_policy_enforcement_manager
12	F5	big-ip_edge_gateway
13	F5	big-ip_webaccelerator
14	F5	traffix_signaling_delivery_controller
1	Redhat	enterprise_linux
2	Redhat	enterprise_linux_eus
3	Redhat	enterprise_mrg
4	Redhat	enterprise_linux_aus
5	Redhat	enterprise_linux_atomic_host
1	Pulsesecure	pulse_policy_secure
2	Pulsesecure	pulse_secure_virtual_application_delivery_controller
1	Linux	linux_kernel
1	Canonical	ubuntu_linux
1	Ivanti	connect_secure

: Total Affected Vendor : 6 | Products : 24

References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2019-11477.

URL	Resource
http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	Third Party Advisory VDB Entry
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en	Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/20/3	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2019-0010.html	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1594	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1602	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1699	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/tcpsack	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf	Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff	Mailing List Patch Vendor Advisory
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md	Patch Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10287	Third Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190625-0001/	Third Party Advisory
https://support.f5.com/csp/article/K78234183	Third Party Advisory
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic	Mitigation Third Party Advisory
https://www.kb.cert.org/vuls/id/905115	Third Party Advisory US Government Resource
https://www.oracle.com/security-alerts/cpujan2020.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_19_28	Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-253-03	Third Party Advisory US Government Resource

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

DevOps-spb-org/Linux-docs

None

Updated: 2 months, 2 weeks ago

2 stars 4 fork 4 watcher

Born at : March 24, 2024, 11:11 a.m. This repo has been linked 3 different CVEs too.

oscomp/proj283-Automated-Security-Testing-of-Protocol-Stacks-in-OS-kernels

None

Updated: 7 months, 3 weeks ago

1 stars 0 fork 0 watcher

Born at : Feb. 19, 2024, 8:30 a.m. This repo has been linked 3 different CVEs too.

Ivan-778/docLinux

None

Updated: 1 year, 8 months ago

0 stars 0 fork 0 watcher

Born at : Feb. 26, 2023, 8:51 p.m. This repo has been linked 3 different CVEs too.

vincent-deng/veracode-container-security-finding-parser

Map Vulnerabilities into Different Layers of the Container Image

Python

Updated: 1 year, 10 months ago

1 stars 0 fork 0 watcher

Born at : Oct. 5, 2022, 12:07 p.m. This repo has been linked 1276 different CVEs too.

developer3000S/PoC-in-GitHub

None

Updated: 8 months, 2 weeks ago

33 stars 3 fork 3 watcher

Born at : March 12, 2021, 12:22 p.m. This repo has been linked 1063 different CVEs too.

hectorgie/PoC-in-GitHub

None

Updated: 1 year, 3 months ago

17 stars 10 fork 10 watcher

Born at : Jan. 2, 2021, 10:19 p.m. This repo has been linked 1050 different CVEs too.

0xT11/CVE-POC

None

Updated: 3 months ago

82 stars 32 fork 32 watcher

Born at : Oct. 2, 2020, 2:49 p.m. This repo has been linked 1111 different CVEs too.

misanthropos/FFFFM

None

Shell Python Makefile

Updated: 4 years, 3 months ago

0 stars 0 fork 0 watcher

Born at : Aug. 5, 2020, 10:05 a.m. This repo has been linked 3 different CVEs too.

sasqwatch/cve-2019-11477-poc

None

Makefile C Shell HTML C++ Python

Updated: 3 months, 1 week ago

6 stars 2 fork 2 watcher

Born at : July 22, 2019, 8:23 p.m. This repo has been linked 1 different CVEs too.

fengjian/kpatch-sack-panic

None

Updated: 5 years, 4 months ago

0 stars 0 fork 0 watcher

Born at : June 27, 2019, 10:32 a.m. This repo has been linked 1 different CVEs too.

sonoransun/tcp_sack_fix

Chef cookbook with persistent syctl fix for TCP SACK DoS vulnerability

Ruby

Updated: 4 years, 2 months ago

0 stars 0 fork 0 watcher

Born at : June 24, 2019, 12:31 a.m. This repo has been linked 1 different CVEs too.

hightemp/docLinux

Статьи о Linux

linux bash markdown articles

Updated: 2 months, 4 weeks ago

166 stars 65 fork 65 watcher

Born at : May 9, 2019, 8:53 p.m. This repo has been linked 3 different CVEs too.

kaosagnt/ansible-everyday

Ansible Everyday Utilities

ansible ansible-playbooks security security-tools automation linux bsd redhat-enterprise-linux debian ubuntu centos fedora hardening

Shell Perl Python

Updated: 9 months, 1 week ago

12 stars 4 fork 4 watcher

Born at : Jan. 14, 2017, 6:57 a.m. This repo has been linked 40 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2019-11477 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2019-11477 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

Action	Type	Old Value	New Value
Removed	CVSS V3	NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Added	CVSS V3.1		NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Changed	Reference Type	http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html No Types Assigned	http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt No Types Assigned	http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt Third Party Advisory
Changed	Reference Type	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en No Types Assigned	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/06/20/3 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/06/20/3 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/06/28/2 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/06/28/2 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/07/06/3 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/07/06/3 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/07/06/4 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/07/06/4 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/10/24/1 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/10/24/1 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.openwall.com/lists/oss-security/2019/10/29/3 No Types Assigned	http://www.openwall.com/lists/oss-security/2019/10/29/3 Mailing List, Third Party Advisory
Changed	Reference Type	http://www.vmware.com/security/advisories/VMSA-2019-0010.html No Types Assigned	http://www.vmware.com/security/advisories/VMSA-2019-0010.html Third Party Advisory
Changed	Reference Type	https://access.redhat.com/errata/RHSA-2019:1594 No Types Assigned	https://access.redhat.com/errata/RHSA-2019:1594 Third Party Advisory
Changed	Reference Type	https://access.redhat.com/errata/RHSA-2019:1602 No Types Assigned	https://access.redhat.com/errata/RHSA-2019:1602 Third Party Advisory
Changed	Reference Type	https://access.redhat.com/errata/RHSA-2019:1699 No Types Assigned	https://access.redhat.com/errata/RHSA-2019:1699 Third Party Advisory
Changed	Reference Type	https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf No Types Assigned	https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf Third Party Advisory
Changed	Reference Type	https://kc.mcafee.com/corporate/index?page=content&id=SB10287 No Types Assigned	https://kc.mcafee.com/corporate/index?page=content&id=SB10287 Third Party Advisory
Changed	Reference Type	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006 No Types Assigned	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006 Third Party Advisory
Changed	Reference Type	https://security.netapp.com/advisory/ntap-20190625-0001/ No Types Assigned	https://security.netapp.com/advisory/ntap-20190625-0001/ Third Party Advisory
Changed	Reference Type	https://www.kb.cert.org/vuls/id/905115 No Types Assigned	https://www.kb.cert.org/vuls/id/905115 Third Party Advisory, US Government Resource
Changed	Reference Type	https://www.oracle.com/security-alerts/cpujan2020.html No Types Assigned	https://www.oracle.com/security-alerts/cpujan2020.html Third Party Advisory
Changed	Reference Type	https://www.oracle.com/security-alerts/cpuoct2020.html No Types Assigned	https://www.oracle.com/security-alerts/cpuoct2020.html Third Party Advisory
Changed	Reference Type	https://www.synology.com/security/advisory/Synology_SA_19_28 No Types Assigned	https://www.synology.com/security/advisory/Synology_SA_19_28 Third Party Advisory
Changed	Reference Type	https://www.us-cert.gov/ics/advisories/icsa-19-253-03 No Types Assigned	https://www.us-cert.gov/ics/advisories/icsa-19-253-03 Third Party Advisory, US Government Resource
Changed	CPE Configuration	OR cpe:2.3:o:linux:linux_kernel::::::::* versions up to (excluding) 4.4.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.5 up to (excluding) 4.9.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.10 up to (excluding) 4.14.127 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.52 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.1.11	OR cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 2.6.29 up to (excluding) 3.16.69 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 3.17 up to (excluding) 4.4.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.5 up to (excluding) 4.9.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.10 up to (excluding) 4.14.127 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.52 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.1.11

Action	Type	Old Value	New Value
Added	CVSS V3		Canonical Ltd. AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Added	CWE		Canonical Ltd. CWE-190

Action	Type	Old Value	New Value
Added	Reference		http://www.openwall.com/lists/oss-security/2019/07/06/3 [No Types Assigned]
Added	Reference		http://www.openwall.com/lists/oss-security/2019/07/06/4 [No Types Assigned]

Action	Type	Old Value	New Value
Added	CVSS V2		(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Added	CVSS V3		AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Changed	Reference Type	http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html No Types Assigned	http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html Third Party Advisory, VDB Entry
Changed	Reference Type	https://access.redhat.com/security/vulnerabilities/tcpsack No Types Assigned	https://access.redhat.com/security/vulnerabilities/tcpsack Third Party Advisory
Changed	Reference Type	https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff No Types Assigned	https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff Mailing List, Patch, Vendor Advisory
Changed	Reference Type	https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md No Types Assigned	https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md Patch, Third Party Advisory
Changed	Reference Type	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 No Types Assigned	https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193 Third Party Advisory
Changed	Reference Type	https://support.f5.com/csp/article/K78234183 No Types Assigned	https://support.f5.com/csp/article/K78234183 Third Party Advisory
Changed	Reference Type	https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic No Types Assigned	https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic Mitigation, Third Party Advisory
Added	CWE		CWE-190
Added	CPE Configuration		OR cpe:2.3:o:linux:linux_kernel::::::::* versions up to (excluding) 4.4.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.5 up to (excluding) 4.9.182 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.10 up to (excluding) 4.14.127 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.15 up to (excluding) 4.19.52 cpe:2.3:o:linux:linux_kernel::::::::* versions from (including) 4.20 up to (excluding) 5.1.11
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_advanced_firewall_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_access_policy_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_access_policy_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_application_acceleration_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_link_controller::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_link_controller:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_webaccelerator::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_webaccelerator:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_application_security_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_application_security_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_fraud_protection_service:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_global_traffic_manager:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_analytics::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_analytics::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_analytics::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_analytics::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_analytics:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_edge_gateway::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_edge_gateway:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:big-ip_domain_name_system::::::::* versions from (including) 11.5.2 up to (including) 11.6.4 cpe:2.3:a:f5:big-ip_domain_name_system::::::::* versions from (including) 12.1.0 up to (including) 12.1.4 cpe:2.3:a:f5:big-ip_domain_name_system::::::::* versions from (including) 13.1.0 up to (including) 13.1.1 cpe:2.3:a:f5:big-ip_domain_name_system::::::::* versions from (including) 14.0.0 up to (including) 14.1.0 cpe:2.3:a:f5:big-ip_domain_name_system:15.0.0:::::::
Added	CPE Configuration		OR cpe:2.3:o:canonical:ubuntu_linux:12.04::::esm:::* cpe:2.3:o:canonical:ubuntu_linux:14.04::::esm:::* cpe:2.3:o:canonical:ubuntu_linux:16.04::::lts:::* cpe:2.3:o:canonical:ubuntu_linux:18.04::::lts:::* cpe:2.3:o:canonical:ubuntu_linux:18.10::::::: cpe:2.3:o:canonical:ubuntu_linux:19.04:::::::
Added	CPE Configuration		OR cpe:2.3:a:redhat:enterprise_linux_atomic_host:-::::::: cpe:2.3:a:redhat:enterprise_mrg:2.0::::::: cpe:2.3:o:redhat:enterprise_linux:5.0::::::: cpe:2.3:o:redhat:enterprise_linux:6.0::::::: cpe:2.3:o:redhat:enterprise_linux:7.0::::::: cpe:2.3:o:redhat:enterprise_linux:8.0::::::: cpe:2.3:o:redhat:enterprise_linux_aus:6.5::::::: cpe:2.3:o:redhat:enterprise_linux_aus:6.6::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.4::::::: cpe:2.3:o:redhat:enterprise_linux_eus:7.5::::::: cpe:2.3:o:redhat:virtualization:4.0:::::::
Added	CPE Configuration		OR cpe:2.3:a:pulsesecure:pulse_connect_secure:-::::::: cpe:2.3:a:pulsesecure:pulse_policy_secure:-::::::: cpe:2.3:a:pulsesecure:pulse_secure_virtual_application_delivery_controller:-:::::::
Added	CPE Configuration		OR cpe:2.3:a:f5:traffix_sdc::::::::* versions from (including) 5.0.0 up to (including) 5.1.0

CVE-2019-11477

Linux TCP SACK Integer Overflow Denial of Service

Description

INFO

June 19, 2019, 12:15 a.m.

Feb. 27, 2024, 9:04 p.m.

Yes !

3.6

3.9

Public PoC/Exploit Available at Github

Affected Products

References to Advisories, Solutions, and Tools

CVE Modified by [email protected]

CPE Deprecation Remap by [email protected]

Modified Analysis by [email protected]

CPE Deprecation Remap by [email protected]

CVE Modified by [email protected]

CPE Deprecation Remap by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

Initial Analysis by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CVE Modified by [email protected]

CWE - Common Weakness Enumeration

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit Prediction

97.17 }} -0.07%

0.99851

CVSS31 - Vulnerability Scoring System

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable