CVE-2019-11479

HIGH

Linux Kernel 4.4-4.4.182 - Denial of Service via TCP MSS Fragmentation

Title source: llm

Description

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.

References (28)

Core 28

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/108818

Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn

https://www.kb.cert.org/vuls/id/905115

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:1594

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:1602

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2019/06/28/2

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/4041-2/

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2019/07/06/3

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

http://www.openwall.com/lists/oss-security/2019/07/06/4

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:1699

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/4041-1/

Third Party Advisory x_refsource_misc

https://www.oracle.com/security-alerts/cpujan2020.html

Vendor Advisory x_refsource_misc

https://www.oracle.com/security-alerts/cpuoct2020.html

Patch, Third Party Advisory x_refsource_misc

https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

View Patch ZIP pw:eip

Mitigation, Third Party Advisory x_refsource_misc

https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic

Third Party Advisory x_refsource_misc

https://access.redhat.com/security/vulnerabilities/tcpsack