CVEvulnerability

CVE-2019-18805

9.8 CRITICAL Published 2019-11-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-190

Description

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

Affected configurations

• linux linux kernel (>= 4.4 < 4.4.180) • linux linux kernel (>= 4.9 < 4.9.172) • linux linux kernel (>= 4.14 < 4.14.115) • linux linux kernel (>= 4.19 < 4.19.38) • linux linux kernel (>= 5.0 < 5.0.11) • linux linux kernel 5.1 • opensuse leap 15.0 • opensuse leap 15.1 • redhat enterprise linux 7.0 • netapp active iq unified manager • netapp data availability services • netapp e-series santricity os controller (>= 11.0.0 <= 11.60.3) • netapp hci management node • netapp solidfire • netapp steelstore cloud integrated storage • netapp hci compute node • netapp hci storage node • broadcom fabric operating system • netapp aff a700s firmware • netapp fas8300 firmware • netapp fas8700 firmware • netapp aff a400 firmware • netapp h610s firmware

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References