CVE:CVE-2019-11478
CNNVD:CNNVD-201906-682
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel中网络子系统处理TCP Selective Acknowledgment片段的方法存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。攻击者可利用该漏洞造成拒绝服务（消耗大量资源）。
solution:Upgrade linux linux_kernel to a higher version than 4.4.182,4.9.182,4.14.127,4.19.52,5.1.11,and avoid the version (,4.4.182),[4.5,4.9.182),[4.10,4.14.127),[4.15,4.19.52),[4.20,5.1.11); Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_link_controller to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_webaccelerator to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_fraud_protection_service to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_analytics to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_edge_gateway to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade f5 big-ip_domain_name_system to a higher version than 11.6.4,12.1.4,13.1.1,14.1.0,15.0.0,and avoid the version [11.5.2,11.6.4],[12.1.0,12.1.4],[13.1.0,13.1.1],[14.0.0,14.1.0],15.0.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,18.10,19.04,and avoid the version 12.04,14.04,16.04,18.04,18.10,19.04; Upgrade redhat enterprise_linux_atomic_host to a higher version than -; Upgrade redhat enterprise_linux to a higher version than 5.0,6.0,7.0,8.0,and avoid the version 5.0,6.0,7.0,8.0; Upgrade redhat enterprise_linux_aus to a higher version than 6.5,6.6,and avoid the version 6.5,6.6; Upgrade redhat enterprise_linux_eus to a higher version than 7.4,7.5,and avoid the version 7.4,7.5; Upgrade redhat enterprise_mrg to a higher version than 2.0,and avoid the version 2.0; Upgrade pulsesecure pulse_connect_secure to a higher version than -; Upgrade pulsesecure pulse_policy_secure to a higher version than -; Upgrade pulsesecure pulse_secure_virtual_application_delivery_controller to a higher version than -; Upgrade f5 traffix_signaling_delivery_controller to a higher version than 5.1.0,and avoid the version [5.0.0,5.1.0]