{"cve_id":"CVE-2019-11477","published":"2019-06-19T00:15:12.640000+00:00","last_modified":"2026-06-17T02:12:58.357000+00:00","vuln_status":"Modified","description":"Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","base_score":7.5,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"NONE","impact_i":"NONE","impact_a":"HIGH","cwe_ids":["CWE-190"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.98745,"epss_percentile":0.99925,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC","DOS"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-09-18T08:59:33.157628+00:00","first_seen":"2019-06-19T00:15:12.640000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","f5","ivanti","linux","pulsesecure","redhat"],"products":["big-ip_access_policy_manager","big-ip_advanced_firewall_manager","big-ip_analytics","big-ip_application_acceleration_manager","big-ip_application_security_manager","big-ip_domain_name_system","big-ip_edge_gateway","big-ip_fraud_protection_service","big-ip_global_traffic_manager","big-ip_link_controller","big-ip_local_traffic_manager","big-ip_policy_enforcement_manager","big-ip_webaccelerator","connect_secure","enterprise_linux","enterprise_linux_atomic_host","enterprise_linux_aus","enterprise_linux_eus","enterprise_mrg","linux_kernel","pulse_policy_secure","pulse_secure_virtual_application_delivery_controller","traffix_signaling_delivery_controller","ubuntu_linux"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["16.04","14.04","18.04","18.10","19.04","12.04"]},{"vendor":"f5","product":"big-ip_access_policy_manager","ranges":["≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_advanced_firewall_manager","ranges":["15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"big-ip_analytics","ranges":["≥ 11.5.2 and ≤ 11.6.4","≥ 14.0.0 and ≤ 14.1.0","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","15.0.0"]},{"vendor":"f5","product":"big-ip_application_acceleration_manager","ranges":["≥ 13.1.0 and ≤ 13.1.1","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 14.0.0 and ≤ 14.1.0","15.0.0"]},{"vendor":"f5","product":"big-ip_application_security_manager","ranges":["15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_domain_name_system","ranges":["≥ 11.5.2 and ≤ 11.6.4","15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_edge_gateway","ranges":["≥ 12.1.0 and ≤ 12.1.4","15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_fraud_protection_service","ranges":["15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"big-ip_global_traffic_manager","ranges":["≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0"]},{"vendor":"f5","product":"big-ip_link_controller","ranges":["15.0.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"big-ip_local_traffic_manager","ranges":["15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"big-ip_policy_enforcement_manager","ranges":["≥ 12.1.0 and ≤ 12.1.4","15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_webaccelerator","ranges":["15.0.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"traffix_signaling_delivery_controller","ranges":["≥ 5.0.0 and ≤ 5.1.0"]},{"vendor":"ivanti","product":"connect_secure","ranges":["all versions"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 3.17 and < 4.4.182","≥ 4.20 and < 5.1.11","≥ 4.15 and < 4.19.52","≥ 4.10 and < 4.14.127","≥ 4.5 and < 4.9.182","≥ 2.6.29 and < 3.16.69"]},{"vendor":"pulsesecure","product":"pulse_policy_secure","ranges":["all versions"]},{"vendor":"pulsesecure","product":"pulse_secure_virtual_application_delivery_controller","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["5.0","7.0","8.0","6.0"]},{"vendor":"redhat","product":"enterprise_linux_atomic_host","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux_aus","ranges":["6.6","6.5"]},{"vendor":"redhat","product":"enterprise_linux_eus","ranges":["7.5","7.4"]},{"vendor":"redhat","product":"enterprise_mrg","ranges":["2.0"]}]}