PT-2019-2418 · Linux+5 · Linux Kernel+5
Jonathan Looney
·
Published
2016-03-17
·
Updated
2024-12-20
·
CVE-2019-11479
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 4.4.182
Linux kernel versions prior to 4.9.182
Linux kernel versions prior to 4.14.127
Linux kernel versions prior to 4.19.52
Linux kernel versions prior to 5.1.11
Description
The issue is caused by the Linux kernel's default Maximum Segment Size (MSS) being hard-coded to 48 bytes, allowing a remote peer to fragment TCP resend queues more significantly than if a larger MSS were enforced. This can be exploited by a remote attacker to cause a denial of service by sending a specially crafted sequence of TCP packets.
Recommendations
For Linux kernel versions prior to 4.4.182, update to version 4.4.182 or later.
For Linux kernel versions prior to 4.9.182, update to version 4.9.182 or later.
For Linux kernel versions prior to 4.14.127, update to version 4.14.127 or later.
For Linux kernel versions prior to 4.19.52, update to version 4.19.52 or later.
For Linux kernel versions prior to 5.1.11, update to version 5.1.11 or later.
Exploit
Fix
DoS
Allocation of Resources Without Limits
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu