This bug was fixed in the package linux - 4.18.0-22.23
--------------- linux (4.18.0-22.23) cosmic; urgency=medium
* Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits
* Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs
-- Marcelo Henrique Cerri <email address hidden> Tue, 04 Jun 2019 15:23:00 -0300
This bug was fixed in the package linux - 4.18.0-22.23
---------------
linux (4.18.0-22.23) cosmic; urgency=medium
* Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard
manipulation (LP: #1831638)
- SAUCE: tcp: tcp_fragment() should apply sane memory limits
* Remote denial of service (system crash) caused by integer overflow in TCP
SACK handling (LP: #1831637)
- SAUCE: tcp: limit payload size of sacked skbs
-- Marcelo Henrique Cerri <email address hidden> Tue, 04 Jun 2019 15:23:00 -0300