Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2019-11479 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2019-11479
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixe...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Big-ip Application Security ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip AnalyticsF5 Big-ip Edge GatewayF5 Big-ip Domain Name SystemCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 7.0F5 Enterprise Manager 3.1.1F5 Traffix Signaling Delivery Controller
7.8
CVSSv2
CVE-2019-11477
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kern...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
5
CVSSv2
CVE-2019-11478
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
6.9
CVSSv2
CVE-2019-11486
The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel prior to 5.0.8 has multiple race conditions.
Linux Linux KernelDebian Debian Linux 9.0Opensuse Leap 42.3Opensuse Leap 15.1Netapp Active Iq -Netapp Solidfire -Netapp Hci Management Node -Netapp Snapprotect -Netapp Vasa Provider For Clustered Data Ontap 9.7Netapp Storage Replication Adapter For Clustered Data Ontap 9.7Netapp Virtual Storage Console 9.7
7.5
CVSSv2
CVE-2019-10126
A flaw was found in the Linux kernel. A heap based buffer overflow in mwifiex_uap_parse_tail_ies function in drivers/net/wireless/marvell/mwifiex/ie.c might lead to memory corruption and possibly other consequences.
Linux Linux KernelRedhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Real Time 7Redhat Enterprise Linux For Real Time For Nfv 7Redhat Virtualization 4.0Redhat Enterprise Linux 8.0Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Eus 7.7Redhat Enterprise Linux Server 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Aus 8.2Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Aus 8.4Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2
8.3
CVSSv2
CVE-2019-3846
A flaw that allowed an malicious user to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.
Linux Linux KernelRedhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Enterprise Linux 8.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Netapp A700s Firmware -Netapp Cn1610 Firmware -Netapp H610s Firmware -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager For Vmware VsphereFedoraproject Fedora 29Fedoraproject Fedora 30Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 42.3Opensuse Leap 15.0Opensuse Leap 15.1
9.3
CVSSv2
CVE-2019-11815
An issue exists in rds_tcp_kill_sock in net/rds/tcp.c in the Linux kernel prior to 5.0.8. There is a race condition leading to a use-after-free, related to net namespace cleanup.
Linux Linux KernelLinux Linux Kernel 5.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 8.0Debian Debian Linux 9.0Opensuse Leap 15.0Opensuse Leap 15.1Opensuse Leap 42.3Netapp Active Iq Unified ManagerNetapp Hci Management Node -Netapp Snapprotect -Netapp Solidfire -Netapp Storage Replication Adapter 7.2Netapp Vasa Provider For Clustered Data OntapNetapp Virtual Storage ConsoleNetapp Hci Compute Node -Netapp Hci Storage Node -Netapp Cn1610 Firmware -
6.9
CVSSv2
CVE-2019-11599
The coredump implementation in the Linux kernel prior to 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified oth...
Linux Linux Kernel
2.1
CVSSv2
CVE-2019-11833
fs/ext4/extents.c in the Linux kernel up to and including 5.1.2 does not zero out the unused memory region in the extent tree block, which might allow local users to obtain sensitive information by reading uninitialized data in the filesystem.
Linux Linux KernelFedoraproject Fedora 29Debian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Real Time 7Redhat Enterprise Linux For Real Time For Nfv 7Redhat Enterprise Linux 8.0Redhat Enterprise Linux Eus 8.1Redhat Enterprise Linux Eus 8.2Redhat Enterprise Linux Server Tus 8.2Redhat Enterprise Linux Server Aus 8.2Redhat Enterprise Linux Server Tus 8.4Redhat Enterprise Linux Eus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.4Redhat Enterprise Linux For Real Time For Nfv Tus 8.2
7.9
CVSSv2
CVE-2019-9503
The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a remote source, the is_wlc_event_frame function will cause this frame to be discarde...
Broadcom Brcmfmac Driver -Redhat Enterprise Linux 6.0Redhat Enterprise Linux 7.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook