PT-2019-2418 · Linux+5 · Linux Kernel+5
Jonathan Looney
·
Publicado
2016-03-17
·
Atualizado
2024-12-20
·
CVE-2019-11479
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.4.182
Linux kernel versions prior to 4.9.182
Linux kernel versions prior to 4.14.127
Linux kernel versions prior to 4.19.52
Linux kernel versions prior to 5.1.11
Description
The issue is caused by the Linux kernel's default Maximum Segment Size (MSS) being hard-coded to 48 bytes, allowing a remote peer to fragment TCP resend queues more significantly than if a larger MSS were enforced. This can be exploited by a remote attacker to cause a denial of service by sending a specially crafted sequence of TCP packets.
Recommendations
For Linux kernel versions prior to 4.4.182, update to version 4.4.182 or later.
For Linux kernel versions prior to 4.9.182, update to version 4.9.182 or later.
For Linux kernel versions prior to 4.14.127, update to version 4.14.127 or later.
For Linux kernel versions prior to 4.19.52, update to version 4.19.52 or later.
For Linux kernel versions prior to 5.1.11, update to version 5.1.11 or later.
Exploit
Correção
DoS
Allocation of Resources Without Limits
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu