{"cve_id":"CVE-2019-11478","published":"2019-06-19T00:15:12.687000+00:00","last_modified":"2026-06-17T02:12:58.647000+00:00","vuln_status":"Modified","description":"Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.","cvss_version":"3.0","cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","base_score":7.5,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"NONE","impact_i":"NONE","impact_a":"HIGH","cwe_ids":["CWE-770","CWE-400"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.94686,"epss_percentile":0.99857,"cap_rule_version":"0.1.1","stage":"IMPACT","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["DOS"],"terminal":true,"cap_confidence":"high","ingested_at":"2026-09-18T08:59:33.157628+00:00","first_seen":"2019-06-19T00:15:12.687000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["canonical","f5","ivanti","linux","pulsesecure","redhat"],"products":["big-ip_access_policy_manager","big-ip_advanced_firewall_manager","big-ip_analytics","big-ip_application_acceleration_manager","big-ip_application_security_manager","big-ip_domain_name_system","big-ip_edge_gateway","big-ip_fraud_protection_service","big-ip_global_traffic_manager","big-ip_link_controller","big-ip_local_traffic_manager","big-ip_policy_enforcement_manager","big-ip_webaccelerator","connect_secure","enterprise_linux","enterprise_linux_atomic_host","enterprise_linux_aus","enterprise_linux_eus","enterprise_mrg","linux_kernel","pulse_policy_secure","pulse_secure_virtual_application_delivery_controller","traffix_signaling_delivery_controller","ubuntu_linux"],"affected":[{"vendor":"canonical","product":"ubuntu_linux","ranges":["18.10","14.04","18.04","16.04","12.04","19.04"]},{"vendor":"f5","product":"big-ip_access_policy_manager","ranges":["≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_advanced_firewall_manager","ranges":["≥ 11.5.2 and ≤ 11.6.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_analytics","ranges":["≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","≥ 11.5.2 and ≤ 11.6.4","15.0.0","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_application_acceleration_manager","ranges":["15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0"]},{"vendor":"f5","product":"big-ip_application_security_manager","ranges":["15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_domain_name_system","ranges":["15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_edge_gateway","ranges":["≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_fraud_protection_service","ranges":["≥ 11.5.2 and ≤ 11.6.4","≥ 13.1.0 and ≤ 13.1.1","≥ 14.0.0 and ≤ 14.1.0","15.0.0","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_global_traffic_manager","ranges":["≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1"]},{"vendor":"f5","product":"big-ip_link_controller","ranges":["≥ 13.1.0 and ≤ 13.1.1","≥ 11.5.2 and ≤ 11.6.4","≥ 12.1.0 and ≤ 12.1.4","≥ 14.0.0 and ≤ 14.1.0","15.0.0"]},{"vendor":"f5","product":"big-ip_local_traffic_manager","ranges":["15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"big-ip_policy_enforcement_manager","ranges":["≥ 11.5.2 and ≤ 11.6.4","15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4"]},{"vendor":"f5","product":"big-ip_webaccelerator","ranges":["15.0.0","≥ 14.0.0 and ≤ 14.1.0","≥ 13.1.0 and ≤ 13.1.1","≥ 12.1.0 and ≤ 12.1.4","≥ 11.5.2 and ≤ 11.6.4"]},{"vendor":"f5","product":"traffix_signaling_delivery_controller","ranges":["≥ 5.0.0 and ≤ 5.1.0"]},{"vendor":"ivanti","product":"connect_secure","ranges":["all versions"]},{"vendor":"linux","product":"linux_kernel","ranges":["≥ 4.15 and < 4.19.52","≥ 4.10 and < 4.14.127","≥ 4.5 and < 4.9.182","≥ 4.20 and < 5.1.11","< 4.4.182"]},{"vendor":"pulsesecure","product":"pulse_policy_secure","ranges":["all versions"]},{"vendor":"pulsesecure","product":"pulse_secure_virtual_application_delivery_controller","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux","ranges":["8.0","6.0","7.0","5.0"]},{"vendor":"redhat","product":"enterprise_linux_atomic_host","ranges":["all versions"]},{"vendor":"redhat","product":"enterprise_linux_aus","ranges":["6.6","6.5"]},{"vendor":"redhat","product":"enterprise_linux_eus","ranges":["7.5","7.4"]},{"vendor":"redhat","product":"enterprise_mrg","ranges":["2.0"]}]}