CVE-2019-11477

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

Jonathan Looney detectó que el valor TCP_SKB_CB(skb)-mayor que tcp_gso_segs estuvo sujeto a un desbordamiento de enteros en el kernel de Linux durante el manejo del Reconocimiento Selectivo (SACK) de TCP. Un atacante remoto podría usar esto para causar una denegación de servicio. Esto se ha corregido en versiones de kernel estables 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, y se corrige en el commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux kernel's socket buffer (SKB) data structure becomes fragmented. Each fragment is about TCP maximum segment size (MSS) bytes. To efficiently process SACK blocks, the Linux kernel merges multiple fragmented SKBs into one, potentially overflowing the variable holding the number of segments. A remote attacker could use this flaw to crash the Linux kernel by sending a crafted sequence of SACK segments on a TCP connection with small value of TCP MSS, resulting in a denial of service (DoS).

*Credits: Jonathan Looney from Netflix

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-04-23 CVE Reserved
2019-06-17 CVE Published
2024-09-17 CVE Updated
2024-11-08 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-190: Integer Overflow or Wraparound
CWE-400: Uncontrolled Resource Consumption

CAPEC

References (31)

URL	Tag	Source
http://packetstormsecurity.com/files/153346/Kernel-Live-Patch-Security-Notice-LSN-0052-1.html	Third Party Advisory
http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html	Third Party Advisory
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191225-01-kernel-en	Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/20/3	Mailing List
http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List
http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List
http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List
http://www.openwall.com/lists/oss-security/2019/10/24/1	Mailing List
http://www.openwall.com/lists/oss-security/2019/10/29/3	Mailing List
http://www.vmware.com/security/advisories/VMSA-2019-0010.html	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/tcpsack	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf	Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10287	Third Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0006	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190625-0001	Third Party Advisory
https://support.f5.com/csp/article/K78234183	Third Party Advisory
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic	Mitigation
https://www.kb.cert.org/vuls/id/905115	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
https://www.synology.com/security/advisory/Synology_SA_19_28	Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-253-03	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=3b4929f65b0d8249f19a50245cd88ed1a2f78cff	2024-02-27
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md	2024-02-27

URL	Date	SRC
https://access.redhat.com/errata/RHSA-2019:1594	2024-02-27
https://access.redhat.com/errata/RHSA-2019:1602	2024-02-27
https://access.redhat.com/errata/RHSA-2019:1699	2024-02-27
https://access.redhat.com/security/cve/CVE-2019-11477	2019-07-08
https://bugzilla.redhat.com/show_bug.cgi?id=1719123	2019-07-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 2.6.29 < 3.16.69 Search vendor "Linux" for product "Linux Kernel" and version " >= 2.6.29 < 3.16.69"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 3.17 < 4.4.182 Search vendor "Linux" for product "Linux Kernel" and version " >= 3.17 < 4.4.182"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.5 < 4.9.182 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.5 < 4.9.182"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.10 < 4.14.127 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.10 < 4.14.127"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.15 < 4.19.52 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.15 < 4.19.52"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.20 < 5.1.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.20 < 5.1.11"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				15.0.0 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				15.0.0 Search vendor "F5" for product "Big-ip Access Policy Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				15.0.0 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				15.0.0 Search vendor "F5" for product "Big-ip Link Controller" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				15.0.0 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				15.0.0 Search vendor "F5" for product "Big-ip Webaccelerator" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				15.0.0 Search vendor "F5" for product "Big-ip Application Security Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				15.0.0 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				15.0.0 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				15.0.0 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Analytics" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Analytics" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Analytics" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				15.0.0 Search vendor "F5" for product "Big-ip Analytics" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				15.0.0 Search vendor "F5" for product "Big-ip Edge Gateway" and version "15.0.0"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 11.5.2 <= 11.6.4 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 11.5.2 <= 11.6.4"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 12.1.0 <= 12.1.4 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 12.1.0 <= 12.1.4"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 13.1.0 <= 13.1.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 13.1.0 <= 13.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 14.0.0 <= 14.1.0 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 14.0.0 <= 14.1.0"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				15.0.0 Search vendor "F5" for product "Big-ip Domain Name System" and version "15.0.0"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				12.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "12.04"		esm		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"		esm		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				18.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.10"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				19.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.04"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Atomic Host Search vendor "Redhat" for product "Enterprise Linux Atomic Host"				-		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				5.0 Search vendor "Redhat" for product "Enterprise Linux" and version "5.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				6.0 Search vendor "Redhat" for product "Enterprise Linux" and version "6.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				7.0 Search vendor "Redhat" for product "Enterprise Linux" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				8.0 Search vendor "Redhat" for product "Enterprise Linux" and version "8.0"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Aus Search vendor "Redhat" for product "Enterprise Linux Aus"				6.5 Search vendor "Redhat" for product "Enterprise Linux Aus" and version "6.5"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Aus Search vendor "Redhat" for product "Enterprise Linux Aus"				6.6 Search vendor "Redhat" for product "Enterprise Linux Aus" and version "6.6"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.4 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.4"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Eus Search vendor "Redhat" for product "Enterprise Linux Eus"				7.5 Search vendor "Redhat" for product "Enterprise Linux Eus" and version "7.5"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg"				2.0 Search vendor "Redhat" for product "Enterprise Mrg" and version "2.0"		-		Affected
Ivanti Search vendor "Ivanti"		Connect Secure Search vendor "Ivanti" for product "Connect Secure"				-		-		Affected
Pulsesecure Search vendor "Pulsesecure"		Pulse Policy Secure Search vendor "Pulsesecure" for product "Pulse Policy Secure"				-		-		Affected
Pulsesecure Search vendor "Pulsesecure"		Pulse Secure Virtual Application Delivery Controller Search vendor "Pulsesecure" for product "Pulse Secure Virtual Application Delivery Controller"				-		-		Affected
F5 Search vendor "F5"		Traffix Signaling Delivery Controller Search vendor "F5" for product "Traffix Signaling Delivery Controller"				>= 5.0.0 <= 5.1.0 Search vendor "F5" for product "Traffix Signaling Delivery Controller" and version " >= 5.0.0 <= 5.1.0"		-		Affected