PT-2019-3984 · Linux+4 · Linux Kernel+4
Published
2016-03-17
·
Updated
2021-06-22
·
CVE-2019-18805
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.0.11
Description
An issue in the Linux kernel allows for a denial of service or possibly other impacts due to a signed integer overflow in
tcp ack update rtt() when a very large integer is written to /proc/sys/net/ipv4/tcp min rtt wlen. This can be triggered by a remote attacker. Additionally, there is a vulnerability in the dwc3 pci probe() function caused by an integer overflow, which can also lead to a denial of service.Recommendations
For Linux kernel versions prior to 5.0.11, update to version 5.0.11 or later to resolve the issue. As a temporary workaround, consider restricting write access to
/proc/sys/net/ipv4/tcp min rtt wlen to prevent exploitation. Additionally, restrict access to the dwc3 pci probe() function in drivers/usb/dwc3/dwc3-pci.c to minimize the risk of exploitation.Fix
DoS
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Centos
Linux Kernel
Red Hat
Suse