UBUNTU-CVE-2019-3874
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
02 / AFFECTED SOFTWARE
Affected packages
60 explicit affected versions
19 explicit affected versions
6 explicit affected versions
61 explicit affected versions
191 explicit affected versions
23 explicit affected versions
5 explicit affected versions
28 explicit affected versions
1 explicit affected versions
8 explicit affected versions
12 explicit affected versions
7 explicit affected versions
1 explicit affected versions
28 explicit affected versions
5 explicit affected versions
4 explicit affected versions
22 explicit affected versions
1 explicit affected versions
23 explicit affected versions
68 explicit affected versions
62 explicit affected versions
24 explicit affected versions
28 explicit affected versions
29 explicit affected versions
7 explicit affected versions
90 explicit affected versions
11 explicit affected versions
51 explicit affected versions
34 explicit affected versions
7 explicit affected versions
49 explicit affected versions
6 explicit affected versions
24 explicit affected versions
26 explicit affected versions
21 explicit affected versions
49 explicit affected versions
4 explicit affected versions
6 explicit affected versions
6 explicit affected versions
1 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.
05 / REFERENCES
Further evidence
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=1033990ac5b2ab6cee93734cb6d301aa3a35bcaa
- https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=9dde27de3e5efa0d032f3c891a0ca833a0d31911
- https://lore.kernel.org/netdev/[email protected]/
- https://ubuntu.com/security/CVE-2019-3874
- https://ubuntu.com/security/notices/USN-3979-1
- https://ubuntu.com/security/notices/USN-3980-1
- https://ubuntu.com/security/notices/USN-3980-2
- https://ubuntu.com/security/notices/USN-3981-1
- https://ubuntu.com/security/notices/USN-3981-2
- https://ubuntu.com/security/notices/USN-3982-1
- https://ubuntu.com/security/notices/USN-3982-2
- https://www.cve.org/CVERecord?id=CVE-2019-3874