CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11683

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.217

EPSS Ranking 95.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 10.0

References

Products affected by CVE-2019-11683

Canonical » Ubuntu Linux » Version: 19.04

cpe:2.3:o:canonical:ubuntu_linux:19.04
Linux » Linux Kernel » Version: 5.0

cpe:2.3:o:linux:linux_kernel:5.0
Linux » Linux Kernel » Version: 5.0.1

cpe:2.3:o:linux:linux_kernel:5.0.1
Linux » Linux Kernel » Version: 5.0.10

cpe:2.3:o:linux:linux_kernel:5.0.10
Linux » Linux Kernel » Version: 5.0.11

cpe:2.3:o:linux:linux_kernel:5.0.11
Linux » Linux Kernel » Version: 5.0.12

cpe:2.3:o:linux:linux_kernel:5.0.12
Linux » Linux Kernel » Version: 5.0.2

cpe:2.3:o:linux:linux_kernel:5.0.2
Linux » Linux Kernel » Version: 5.0.3

cpe:2.3:o:linux:linux_kernel:5.0.3
Linux » Linux Kernel » Version: 5.0.4

cpe:2.3:o:linux:linux_kernel:5.0.4
Linux » Linux Kernel » Version: 5.0.5

cpe:2.3:o:linux:linux_kernel:5.0.5
Linux » Linux Kernel » Version: 5.0.6

cpe:2.3:o:linux:linux_kernel:5.0.6
Linux » Linux Kernel » Version: 5.0.7

cpe:2.3:o:linux:linux_kernel:5.0.7
Linux » Linux Kernel » Version: 5.0.8

cpe:2.3:o:linux:linux_kernel:5.0.8
Linux » Linux Kernel » Version: 5.0.9

cpe:2.3:o:linux:linux_kernel:5.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11683

Products

Pricing

Contact Us