CVE-2019-11477

7.5 highEPSS 99%

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 99% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2019-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
f5:big-ip_access_policy_manager
f5:big-ip_advanced_firewall_manager
f5:big-ip_analytics
f5:big-ip_application_acceleration_manager
f5:big-ip_application_security_manager
f5:big-ip_domain_name_system
f5:big-ip_edge_gateway
f5:big-ip_fraud_protection_service
f5:big-ip_global_traffic_manager
f5:big-ip_link_controller
f5:big-ip_local_traffic_manager
f5:big-ip_policy_enforcement_manager
f5:big-ip_webaccelerator
f5:traffix_signaling_delivery_controller
ivanti:connect_secure
linux:linux_kernel
pulsesecure:pulse_policy_secure
pulsesecure:pulse_secure_virtual_application_delivery_controller
redhat:enterprise_linux
redhat:enterprise_linux_atomic_host
redhat:enterprise_linux_aus
redhat:enterprise_linux_eus
redhat:enterprise_mrg

References

Check your stack JSON