Synopsis: Important: kernel security update
Advisory ID:       SLSA-2019:1481-1
Issue Date:        2019-06-17
CVE Numbers:       CVE-2019-11477
                   CVE-2019-11478
                   CVE-2019-11479
--

Security Fix(es):

* An integer overflow flaw was found in the way the Linux kernel's
networking subsystem processed TCP Selective Acknowledgment (SACK)
segments. While processing SACK segments, the Linux kernel's socket buffer
(SKB) data structure becomes fragmented. Each fragment is about TCP
maximum segment size (MSS) bytes. To efficiently process SACK blocks, the
Linux kernel merges multiple fragmented SKBs into one, potentially
overflowing the variable holding the number of segments. A remote attacker
could use this flaw to crash the Linux kernel by sending a crafted
sequence of SACK segments on a TCP connection with small value of TCP MSS,
resulting in a denial of service (DoS). (CVE-2019-11477)

* Kernel: tcp: excessive resource consumption while processing SACK blocks
allows remote denial of service (CVE-2019-11478)

* Kernel: tcp: excessive resource consumption for TCP connections with low
MSS allows remote denial of service (CVE-2019-11479)
--

SL7
  x86_64
    bpftool-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-debug-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-debug-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-devel-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-headers-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-tools-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-957.21.3.el7.x86_64.rpm
    perf-3.10.0-957.21.3.el7.x86_64.rpm
    perf-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm
    python-perf-3.10.0-957.21.3.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-957.21.3.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-957.21.3.el7.noarch.rpm
    kernel-doc-3.10.0-957.21.3.el7.noarch.rpm

- Scientific Linux Development Team

SciLinux: SLSA-2019-1481-1 Important: kernel on SL7.x x86_64

An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments

Summary

Important: kernel security update



Security Fixes

* An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux kernel's socket buffer (SKB) data structure becomes fragmented. Each fragment is about TCP maximum segment size (MSS) bytes. To efficiently process SACK blocks, the Linux kernel merges multiple fragmented SKBs into one, potentially overflowing the variable holding the number of segments. A remote attacker could use this flaw to crash the Linux kernel by sending a crafted sequence of SACK segments on a TCP connection with small value of TCP MSS, resulting in a denial of service (DoS). (CVE-2019-11477)
* Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service (CVE-2019-11478)
* Kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service (CVE-2019-11479)
SL7 x86_64 bpftool-3.10.0-957.21.3.el7.x86_64.rpm kernel-3.10.0-957.21.3.el7.x86_64.rpm kernel-debug-3.10.0-957.21.3.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm kernel-debug-devel-3.10.0-957.21.3.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.21.3.el7.x86_64.rpm kernel-devel-3.10.0-957.21.3.el7.x86_64.rpm kernel-headers-3.10.0-957.21.3.el7.x86_64.rpm kernel-tools-3.10.0-957.21.3.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm kernel-tools-libs-3.10.0-957.21.3.el7.x86_64.rpm perf-3.10.0-957.21.3.el7.x86_64.rpm perf-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm python-perf-3.10.0-957.21.3.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.21.3.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-957.21.3.el7.x86_64.rpm noarch kernel-abi-whitelists-3.10.0-957.21.3.el7.noarch.rpm kernel-doc-3.10.0-957.21.3.el7.noarch.rpm
- Scientific Linux Development Team

Severity
Advisory ID: SLSA-2019:1481-1
Issued Date: : 2019-06-17
CVE Numbers: CVE-2019-11477
CVE-2019-11478
CVE-2019-11479

Related News

6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly
19.Laptop Bed Esm H320
2 - 3 min read
The recently released Linux Kernel 6.9 brings forth a blend of crucial upgrades and enhancements, catering to the ever-evolving needs of the Linux
4.Lock AbstractDigital Esm H320
1 - 2 min read
Nmap 7.95 introduces myriad enhancements, primarily focusing on OS and service detection signatures. This reflects the dedication of the Nmap
5.ShakingHands Esm H320
3 - 5 min read
There has been a promising shift in the tech industry, with major companies pledging to release products with built-in security features. This
18.WifiCutout Landscape Esm H320
2 - 3 min read
A novel attack called TunnelVision has been discovered. It compromises the security of virtually all VPN apps, rendering their purpose useless. The

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved