[ubuntu/xenial-security] linux 4.4.0-151.178 (Accepted)

Andy Whitcroft apw at canonical.com
Wed Jun 19 11:02:05 UTC 2019


linux (4.4.0-151.178) xenial; urgency=medium

  * Remote denial of service (system crash) caused by integer overflow in TCP
    SACK handling (LP: #1831637)
    - SAUCE: tcp: limit payload size of sacked skbs
    - SAUCE: tcp: fix fack_count accounting on tcp_shift_skb_data()

  * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
    manipulation (LP: #1831638)
    - SAUCE: tcp: tcp_fragment() should apply sane memory limits

Date: 2019-06-11 08:18:33.971564+00:00
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux/4.4.0-151.178
-------------- next part --------------
Sorry, changesfile not available.


More information about the Xenial-changes mailing list