Veracode Vulnerability DatabaseVERACODE:19511Denial Of Service (DoS)
0.003 Low
EPSS
Percentile
68.9%
Linux kernel is vulnerable to denial of service(DoS) attacks. This is because improper validation in the bnx2x network card driver. An attacker could send a packet with a gso_size larger than ~9700 bytes because of that Untrusted guest VMs could exploit this vulnerability in the host machine, causing a crash in the network card.
References
lists.openwall.net/netdev/2018/01/16/40
lists.openwall.net/netdev/2018/01/18/96
access.redhat.com/articles/3553061
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.6_release_notes/index
access.redhat.com/errata/RHSA-2018:2948
access.redhat.com/errata/RHSA-2018:3083
access.redhat.com/errata/RHSA-2018:3096
access.redhat.com/security/cve/CVE-2017-18360
access.redhat.com/security/cve/CVE-2018-18690
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1322930
bugzilla.redhat.com/show_bug.cgi?id=1488484
bugzilla.redhat.com/show_bug.cgi?id=1504058
bugzilla.redhat.com/show_bug.cgi?id=1507027
bugzilla.redhat.com/show_bug.cgi?id=1542494
bugzilla.redhat.com/show_bug.cgi?id=1557434
bugzilla.redhat.com/show_bug.cgi?id=1557599
bugzilla.redhat.com/show_bug.cgi?id=1558328
bugzilla.redhat.com/show_bug.cgi?id=1561162
bugzilla.redhat.com/show_bug.cgi?id=1563697
bugzilla.redhat.com/show_bug.cgi?id=1564186
bugzilla.redhat.com/show_bug.cgi?id=1568167
bugzilla.redhat.com/show_bug.cgi?id=1572983
bugzilla.redhat.com/show_bug.cgi?id=1584775
bugzilla.redhat.com/show_bug.cgi?id=1592654
bugzilla.redhat.com/show_bug.cgi?id=1609717
lists.debian.org/debian-lts-announce/2019/05/msg00002.html
patchwork.ozlabs.org/patch/859410/
usn.ubuntu.com/3617-1/
usn.ubuntu.com/3617-2/
usn.ubuntu.com/3617-3/
usn.ubuntu.com/3619-1/
usn.ubuntu.com/3619-2/
usn.ubuntu.com/3620-1/
usn.ubuntu.com/3620-2/
usn.ubuntu.com/3632-1/
Related
