UBUNTU-CVE-2019-3874

Details

The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.

Affected Packages(40 packages)

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1044.47

linux-azure

Ubuntu 14.04 LTS

Fixed in:

4.15.0-1045.49~14.04.1

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-148.174~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-148.174

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1083.93

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1039.41~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1045.49

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1032.34~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-50.54~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1046.52

References

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=1033990ac5b2ab6cee93734cb6d301aa3a35bcaa

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=9dde27de3e5efa0d032f3c891a0ca833a0d31911

REPORT

https://lore.kernel.org/netdev/cover.1554022192.git.lucien.xin@gmail.com/

REPORT

https://ubuntu.com/security/CVE-2019-3874

ADVISORY

https://ubuntu.com/security/notices/USN-3979-1

ADVISORY

https://ubuntu.com/security/notices/USN-3980-1

ADVISORY

https://ubuntu.com/security/notices/USN-3980-2

ADVISORY

https://ubuntu.com/security/notices/USN-3981-1

ADVISORY

https://ubuntu.com/security/notices/USN-3981-2

ADVISORY

https://ubuntu.com/security/notices/USN-3982-1

ADVISORY

https://ubuntu.com/security/notices/USN-3982-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-3874