Vulnerability Bulletins

Linux Kernel TCP SACK Denial of Service Issues

   
Affected software AmazonWS
 
June 17, 2019 10:00AM PDT CVE Identifiers: CVE-2019-11477, CVE-2019-11478, CVE-2019-11479 AWS is aware of three recently-disclosed issues which affect the TCP processing subsystem of the Linux kernel. Specifically, a malicious TCP client or server can transmit a specially crafted series of packets that may cause the Linux kernel of any targeted connecting system to panic and reboot. AWS’s underlying systems and infrastructure are protected against these issues. With the exception of the

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2019-005/