CVE-2019-18805: Integer Overflow
A flaw was reported in kernel TCP subsystem while calculating a packet round trip time, when a sysctl parameter (/proc/sys/net/ipv4/tcpminrttwlen) when is set wrongly. This causes an integer over flaw which can lead to a Denial Of Service (DOS) attack.
Additional Information: ----------------------- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78
Other sources
A flaw was reported in the Linux kernel's TCP subsystem while calculating a packet round trip time, when a sysctl parameter (/proc/sys/net/ipv4/tcpminrttwlen) is set incorrectly. This causes an integer overflow which can lead to a denial Of service (DOS) attack.
An issue was discovered in net/ipv4/sysctlnetipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcpinput.c signed integer overflow in tcpackupdatertt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcpminrttwlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-18805?
The severity of CVE-2019-18805 is critical with a CVSS score of 9.8.
How does CVE-2019-18805 affect Linux Kernel?
CVE-2019-18805 affects the Linux Kernel versions before 5.0.11.
What is the impact of CVE-2019-18805?
CVE-2019-18805 can lead to a denial of service or possibly unspecified impact.
How can I fix CVE-2019-18805?
To fix CVE-2019-18805, update your Linux Kernel to version 5.0.11 or later.
Where can I find more information about CVE-2019-18805?
More information about CVE-2019-18805 can be found on the official Linux Kernel Git repository, Red Hat Bugzilla, and Red Hat Errata.