VYPR

Pulse Secure Virtual Application Delivery Controller

by Pulsesecure

CVEs (2)

  • CVE-2019-11478MedJun 19, 2019
    risk 0.08cvss 5.3epss 0.95

    Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been…

  • CVE-2019-11477HigJun 19, 2019
    risk 0.08cvss 7.5epss 0.99

    Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel…