Denial Of Service (DoS)

2020-09-2106:24:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.007 Low

EPSS

Percentile

80.4%

JSON

linux is vulnerable to denial of service (DoS). There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

CPENameOperatorVersion
linux-oem:eoaneq4.15.0.1050.54
linux-gcp:bioniceq4.15.0.1006.8
linux-oem:bioniceq4.15.0.1004.2
linux-kvm:bioniceq4.15.0.1008.8
linux-azure:bioniceq4.15.0.1009.9
linux-aws:bioniceq4.15.0.1007.7

Name	Operator	Version
linux-oem:eoan	eq	4.15.0.1050.54
linux-gcp:bionic	eq	4.15.0.1006.8
linux-oem:bionic	eq	4.15.0.1004.2
linux-kvm:bionic	eq	4.15.0.1008.8
linux-azure:bionic	eq	4.15.0.1009.9
linux-aws:bionic	eq	4.15.0.1007.7