Skip to content
OpenAdvisories

Archive

18 June 2019

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2019-11478 Public exploit EPSS 94%

    SACK can cause extensive memory use via fragmented resend queue

    Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of serv…

  • High 7.5
    CVE-2019-11477 Public exploit EPSS 99%

    Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

    Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fi…

  • Unscored —
    CVE-2018-18852 Public exploit EPSS 64%

    Cerio DT-300N 1.1.6 through 1.1.12 devices allow OS command injection because of improper input validation of the web-i…

  • Unscored —
    CVE-2019-6965 Public exploit

    An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.