HOMEVULNERABILITIESCVE-2019-18805
CRITICAL

CVE-2019-18805

CWE-190Published: November 7, 2019· Updated: Jun 17, 2026

9.8
CVSS v3.1

Official Description

An issue was discovered in net/ipv4/sysctl_net_ipv4.c in the Linux kernel before 5.0.11. There is a net/ipv4/tcp_input.c signed integer overflow in tcp_ack_update_rtt() when userspace writes a very large integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of service or possibly unspecified other impact, aka CID-19fad20d15a6.

NVD Source

Technical Analysis

CVE-2019-18805 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges Req.None
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

broadcom1 product(s)
fabric operating system
Linux1 product(s)
linux kernel
netapp18 product(s)
active iq unified managerdata availability servicese-series santricity os controllerhci management nodesolidfiresteelstore cloud integrated storagehci compute nodehci storage nodeaff a700s firmwareaff a700sfas8300 firmwarefas8300+6
openSUSE1 product(s)
leap
Red Hat1 product(s)
enterprise linux
Source: NVD CPE · 24 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
PATCHhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78
PATCHhttps://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11
PATCHhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html
ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0740
ADVISORYhttps://security.netapp.com/advisory/ntap-20191205-0001/
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.html
ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.html
ADVISORYhttps://access.redhat.com/errata/RHSA-2020:0740
ADVISORYhttps://security.netapp.com/advisory/ntap-20191205-0001/

All References (12)

→
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.htmlMailing List · Third Party Advisory
→
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.htmlMailing List · Third Party Advisory
→
https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
→
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11Mailing List · Patch · Vendor Advisory
→
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78Mailing List · Patch · Vendor Advisory
→
https://security.netapp.com/advisory/ntap-20191205-0001/Third Party Advisory
→
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00035.htmlMailing List · Third Party Advisory
→
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00039.htmlMailing List · Third Party Advisory
→
https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
→
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.11Mailing List · Patch · Vendor Advisory
→
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=19fad20d15a6494f47f85d869f00b11343ee5c78Mailing List · Patch · Vendor Advisory
→
https://security.netapp.com/advisory/ntap-20191205-0001/Third Party Advisory

Quick Facts

CVE IDCVE-2019-18805
CVSS Score9.8 / 10
SeverityCRITICAL
WeaknessCWE-190
CISA KEVNo
Affected5 vendor(s)
PublishedNov 7, 2019

Related CVEs (CWE-190)

CVE-2012-5835
10.0
CVE-2012-5143
10.0
CVE-2010-1233
10.0
CVE-2010-3254
10.0
CVE-2008-2663
10.0
CVE-2013-2555
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2019-18805 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWatch. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2019-18805·NVD