SUSE-SU-2019:1924-1

SUSE-SU-2019:1924-1 · Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP1)

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

This update for the Linux Kernel 3.12.74-60_64_110 fixes several issues. The following security issues were fixed: - CVE-2019-11477: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. (bsc#1137586) - CVE-2019-11478: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. (bsc#1137586) This update contains a regression fix for CVE-2019-11477 and CVE-2019-11478 (bsc#1140747).

Korrektur verfügbar

Veröffentlicht

2019-07-23T07:56:38Z

Aktualisiert

2026-02-04T02:43:21.975878Z

Technologie-Stack: system

Prüfen Sie Ihren Server →