search cancel

TCP SACK issue with Protection Engine

book

Article ID: 175513

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Protection Engine for NAS

Issue/Introduction

What is the impact of CVE-2019-11477/CVE-2019-114778/CVE-2019-114779 on Symantec Protection Engine (SPE)?

Environment

SPE for NAS/SPE for Cloud Services on a supported Linux operating system

Resolution

This vulnerability was found by Netflix and affects Linux systems' networking. This does not have a direct effect on SPE, but any attempts to implement workarounds may cause networking issues.

Symantec recommends following the instrucitons of the vendor/distribution of Linux to patch the kernel.