Vulnerability Description
An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 4.4, < 4.4.180 |
| Opensuse | Leap | 15.0 |
| Redhat | Enterprise Linux | 7.0 |
| Netapp | Active Iq Unified Manager | - |
| Netapp | Data Availability Services | - |
| Netapp | E-Series Santricity Os Controller | >= 11.0.0, <= 11.60.3 |
| Netapp | Hci Management Node | - |
| Netapp | Solidfire | - |
| Netapp | Steelstore Cloud Integrated Storage | - |
| Netapp | Hci Compute Node | - |
| Netapp | Hci Storage Node | - |
| Broadcom | Fabric Operating System | - |
| Netapp | Aff A700S Firmware | - |
| Netapp | Aff A700S | - |
| Netapp | Fas8300 Firmware | - |
| Netapp | Fas8300 | - |
| Netapp | Fas8700 Firmware | - |
| Netapp | Fas8700 | - |
| Netapp | Aff A400 Firmware | - |
| Netapp | Aff A400 | - |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.htmlMailing ListThird Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11Mailing ListPatchVendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19Mailing ListPatchVendor Advisory
- https://security.netapp.com/advisory/ntap-20191205-0001/Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.htmlMailing ListThird Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11Mailing ListPatchVendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19Mailing ListPatchVendor Advisory
- https://security.netapp.com/advisory/ntap-20191205-0001/Third Party Advisory
FAQ
What is CVE-2019-18805?
CVE-2019-18805 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very la...
How severe is CVE-2019-18805?
CVE-2019-18805 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-18805?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Opensuse Leap, Redhat Enterprise Linux, Netapp Active Iq Unified Manager, Netapp Data Availability Services.