CVE-2019-11683 PUBLISHED

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.

EPSS 10.37% · 93.2th percentile

Risk Scores

EPSS Score
10.37%
93.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlinux0, 3.11.0-12.19, 3.12.0-1.3
Ubuntu:Pro:14.04:LTSlinux-lts-xenial0, 4.4.0-13.29~14.04.1, 4.4.0-14.30~14.04.2

Timeline

References

Open in Interactive Console →