DeutschShown in its original language — a full translation is planned for a future version.
Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2019-06-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-11479US | high7.5 | — | ||
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger… | ||||
| CVE-2019-11478US | high7.5 | — | ||
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgme… | ||||
| CVE-2019-11477US | high7.5 | Exploit | ||
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs).… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2019:1481 vom 2019-06-18external
- CentOS Security Advisory CESA-2019:1488 vom 2019-06-18external
- Juniper Security Advisory JSA11053 vom 2020-10-14external
- Oracle Linux Security Advisoryexternal
- Oracle Linux Security Advisory ELSA-2019-1488 vom 2019-06-18external
- Oracle Linux Security Advisory ELSA-2019-1873 vom 2019-07-30external
- Oracle Linux Security Advisory ELSA-2019-1959 vom 2019-08-19external
- Oracle Linux Security Advisory ELSA-2019-2029 vom 2019-08-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan