CVE-2019-11479

kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.

Jonathan Looney descubrió que el tamaño máximo de segmento (MSS) por defecto del kernel de Linux está codificado a 48 bytes. Esto permite a un peer remoto fragmentar las colas de reenvío de TCP significativamente más que si se aplicara un MSS más grande. Un atacante remoto podría usar esto para causar una denegación de servicio. Esto se ha corregido en versiones de kernel estables 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, y se corrige en los commits 967c05aee439e6e5d7d805e195b3a20f5c433d6 y 5f3e2bf008c2221478101ee72f5c4ccccc

An excessive resource consumption flaw was found in the way the Linux kernel's networking subsystem processed TCP segments. If the Maximum Segment Size (MSS) of a TCP connection was set to low values, such as 48 bytes, it can leave as little as 8 bytes for the user data, which significantly increases the Linux kernel's resource (CPU, Memory, and Bandwidth) utilization. A remote attacker could use this flaw to cause a denial of service (DoS) by repeatedly sending network traffic on a TCP connection with low TCP MSS.

*Credits: Jonathan Looney from Netflix

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-04-23 CVE Reserved
2019-06-17 CVE Published
2024-09-16 CVE Updated
2024-11-08 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption
CWE-405: Asymmetric Resource Consumption (Amplification)
CWE-770: Allocation of Resources Without Limits or Throttling

CAPEC

References (30)

URL	Tag	Source
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-010.txt	Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/28/2	Mailing List
http://www.openwall.com/lists/oss-security/2019/07/06/3	Mailing List
http://www.openwall.com/lists/oss-security/2019/07/06/4	Mailing List
http://www.securityfocus.com/bid/108818	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/tcpsack	Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-462066.pdf	Third Party Advisory
https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44193	Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10287	Third Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2019-0008	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190625-0001	Third Party Advisory
https://support.f5.com/csp/article/K35421172	Third Party Advisory
https://support.f5.com/csp/article/K35421172?utm_source=f5support&amp%3Butm_medium=RSS	X_refsource_confirm
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/SACKPanic	Mitigation
https://www.kb.cert.org/vuls/id/905115	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2020.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	X_refsource_misc
https://www.synology.com/security/advisory/Synology_SA_19_28	Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-253-03	Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsma-20-170-06	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=5f3e2bf008c2221478101ee72f5cb4654b9fc363	2023-11-07
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=967c05aee439e6e5d7d805e195b3a20ef5c433d6	2023-11-07
https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md	2023-11-07

URL	Date	SRC
https://access.redhat.com/errata/RHSA-2019:1594	2023-11-07
https://access.redhat.com/errata/RHSA-2019:1602	2023-11-07
https://access.redhat.com/errata/RHSA-2019:1699	2023-11-07
https://usn.ubuntu.com/4041-1	2023-11-07
https://usn.ubuntu.com/4041-2	2023-11-07
https://access.redhat.com/security/cve/CVE-2019-11479	2019-07-08
https://bugzilla.redhat.com/show_bug.cgi?id=1719129	2019-07-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Redhat Search vendor "Redhat"	Virtualization Host Search vendor "Redhat" for product "Virtualization Host"	4.0 Search vendor "Redhat" for product "Virtualization Host" and version "4.0"	-	Affected	in	Redhat Search vendor "Redhat"	Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"	7.0 Search vendor "Redhat" for product "Enterprise Linux" and version "7.0"	-	Safe
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.4 < 4.4.182 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.4 < 4.4.182"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.9 < 4.9.182 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.9 < 4.9.182"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.14 < 4.14.127 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.14 < 4.14.127"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 4.19 < 4.19.52 Search vendor "Linux" for product "Linux Kernel" and version " >= 4.19 < 4.19.52"		-		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				>= 5.1 < 5.1.11 Search vendor "Linux" for product "Linux Kernel" and version " >= 5.1 < 5.1.11"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Advanced Firewall Manager Search vendor "F5" for product "Big-ip Advanced Firewall Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Advanced Firewall Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Access Policy Manager Search vendor "F5" for product "Big-ip Access Policy Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Access Policy Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Policy Enforcement Manager Search vendor "F5" for product "Big-ip Policy Enforcement Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Policy Enforcement Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Webaccelerator Search vendor "F5" for product "Big-ip Webaccelerator"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Webaccelerator" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Security Manager Search vendor "F5" for product "Big-ip Application Security Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Application Security Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Local Traffic Manager Search vendor "F5" for product "Big-ip Local Traffic Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Local Traffic Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Fraud Protection Service Search vendor "F5" for product "Big-ip Fraud Protection Service"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Fraud Protection Service" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Global Traffic Manager Search vendor "F5" for product "Big-ip Global Traffic Manager"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Global Traffic Manager" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Analytics" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Edge Gateway Search vendor "F5" for product "Big-ip Edge Gateway"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Edge Gateway" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 11.5.2 < 11.6.5.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 11.5.2 < 11.6.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 12.1.0 < 12.1.5.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 12.1.0 < 12.1.5.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 13.1.0 < 13.1.3.2 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 13.1.0 < 13.1.3.2"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 14.0.0 < 14.0.1.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 14.0.0 < 14.0.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 14.1.2 < 14.1.2.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 14.1.2 < 14.1.2.1"		-		Affected
F5 Search vendor "F5"		Big-ip Domain Name System Search vendor "F5" for product "Big-ip Domain Name System"				>= 15.0.0 < 15.0.1.1 Search vendor "F5" for product "Big-ip Domain Name System" and version " >= 15.0.0 < 15.0.1.1"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				14.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "14.04"		esm		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04"		lts		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				18.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.10"		-		Affected
Canonical Search vendor "Canonical"		Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux"				19.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.04"		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				7.0 Search vendor "Redhat" for product "Enterprise Linux" and version "7.0"		-		Affected
F5 Search vendor "F5"		Big-iq Centralized Management Search vendor "F5" for product "Big-iq Centralized Management"				>= 5.1.0 <= 5.4.0 Search vendor "F5" for product "Big-iq Centralized Management" and version " >= 5.1.0 <= 5.4.0"		-		Affected
F5 Search vendor "F5"		Big-iq Centralized Management Search vendor "F5" for product "Big-iq Centralized Management"				>= 6.0.0 <= 6.1.0 Search vendor "F5" for product "Big-iq Centralized Management" and version " >= 6.0.0 <= 6.1.0"		-		Affected
F5 Search vendor "F5"		Enterprise Manager Search vendor "F5" for product "Enterprise Manager"				3.1.1 Search vendor "F5" for product "Enterprise Manager" and version "3.1.1"		-		Affected
F5 Search vendor "F5"		Iworkflow Search vendor "F5" for product "Iworkflow"				2.3.0 Search vendor "F5" for product "Iworkflow" and version "2.3.0"		-		Affected
F5 Search vendor "F5"		Traffix Signaling Delivery Controller Search vendor "F5" for product "Traffix Signaling Delivery Controller"				>= 5.0.0 <= 5.1.0 Search vendor "F5" for product "Traffix Signaling Delivery Controller" and version " >= 5.0.0 <= 5.1.0"		-		Affected