CVE-2019-11683

udp_gro_receive_segment in net/ipv4/udp_offload.c in the Linux kernel 5.x before 5.0.13 allows remote attackers to cause a denial of service (slab-out-of-bounds memory corruption) or possibly have unspecified other impact via UDP packets with a 0 payload, because of mishandling of padded packets, aka the "GRO packet of death" issue.

• CWE-787

• http://www.openwall.com/lists/oss-security/2019/05/02/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/05/05/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108142Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.13Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4dd2b82d5adfbe0b1587ccad7a8f76d826120f37Issue Tracking, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7CYLTCIRTKUB4R2TLLUYPZLDQL44OBG/
• https://security.netapp.com/advisory/ntap-20190517-0002/Third Party Advisory
• https://support.f5.com/csp/article/K69550896Third Party Advisory
• https://usn.ubuntu.com/3979-1/Third Party Advisory
• https://www.spinics.net/lists/netdev/msg568315.htmlIssue Tracking, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/05/02/1Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2019/05/05/4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/108142Third Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.0.13Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=4dd2b82d5adfbe0b1587ccad7a8f76d826120f37Issue Tracking, Patch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7CYLTCIRTKUB4R2TLLUYPZLDQL44OBG/
• https://security.netapp.com/advisory/ntap-20190517-0002/Third Party Advisory
• https://support.f5.com/csp/article/K69550896Third Party Advisory
• https://usn.ubuntu.com/3979-1/Third Party Advisory
• https://www.spinics.net/lists/netdev/msg568315.htmlIssue Tracking, Patch, Third Party Advisory

Published

May 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11676The user defined DNS name in Zoho ManageEngine Firewall Anal…
• CVE-2019-11677The Custom Report import function in Zoho ManageEngine Firew…
• CVE-2019-11678The "default reports" feature in Zoho ManageEngine Firewall …
• CVE-2019-1168An elevation of privilege exists in the p2pimsvc service whe…7.8
• CVE-2019-11680KonaKart 8.9.0.0 is vulnerable to Remote Code Execution by u…
• CVE-2019-11682A buffer overflow in the SMTP response service in MailCarrie…
• CVE-2019-11684Improper Access Control in the RCP+ server of the Bosch Vide…9.8
• CVE-2019-11686Western Digital SanDisk X300, X300s, X400, and X600 devices:…5.5
• CVE-2019-11687An issue was discovered in the DICOM Part 10 File Format in …7.8
• CVE-2019-11688An issue was discovered in ASUSTOR exFAT Driver through 1.0.…7.4
• CVE-2019-11689An issue was discovered in ASUSTOR exFAT Driver through 1.0.…8.1
• CVE-2019-1169An elevation of privilege vulnerability exists in Windows wh…7.8