发布日期：2019-09-09
更新日期：2019-09-09

受影响系统：

Linux kernel < 5.1.11
Linux kernel < 4.9.182
Linux kernel < 4.4.182
Linux kernel < 4.19.52
Linux kernel < 4.14.127

描述：

---

CVE(CAN) ID: CVE-2019-11477

Linux kernel是开源操作系统Linux所使用的内核。

Linux kernel在处理TCP选择性应答 (SACK)时，TCP_SKB_CB(skb)->tcp_gso_segs值存在整数溢出漏洞。攻击者可利用该漏洞造成拒绝服务。

<*来源：Jonathan Looney
  *>

建议：

---

厂商补丁：

Linux
-----
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：

http://www.kernel.org/

参考：
URL:https://www.kb.cert.org/vuls/id/905115
CONFIRM:http://www.vmware.com/security/advisories/VMSA-2019-0010.html
CONFIRM:https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193
CONFIRM:https://kc.mcafee.com/corporate/index?page=content&id=SB10287
CONFIRM:https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006
CONFIRM:https://security.netapp.com/advisory/ntap-20190625-0001/
CONFIRM:https://support.f5.com/csp/article/K78234183
CONFIRM:https://www.synology.com/security/advisory/Synology_SA_19_28
MISC:http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html
MISC:https://access.redhat.com/security/vulnerabilities/tcpsack
MISC:https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff
MISC:https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md
MISC:https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic
MLIST:[oss-security] 20190620 Re: Linux and FreeBSD Kernel: Multiple TCP-based remote denial of service issues
URL:http://www.openwall.com/lists/oss-security/2019/06/20/3
MLIST:[oss-security] 20190628 Re: linux-distros membership application - Microsoft
URL:http://www.openwall.com/lists/oss-security/2019/06/28/2
MLIST:[oss-security] 20190706 Re: linux-distros membership application - Microsoft
URL:http://www.openwall.com/lists/oss-security/2019/07/06/3
MLIST:[oss-security] 20190706 Re: linux-distros membership application - Microsoft
URL:http://www.openwall.com/lists/oss-security/2019/07/06/4
REDHAT:RHSA-2019:1594
URL:https://access.redhat.com/errata/RHSA-2019:1594
REDHAT:RHSA-2019:1602
URL:https://access.redhat.com/errata/RHSA-2019:1602
REDHAT:RHSA-2019:1699
URL:https://access.redhat.com/errata/RHSA-2019:1699

浏览次数：1705
严重程度：0（网友投票）