7.8
CVE-2018-5390
- EPSS 3.92%
- Published 06.08.2018 20:29:01
- Last modified 21.11.2024 04:08:43
- Source cret@cert.org
- Teams watchlist Login
- Open Login
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Virtualization Version4.0
Redhat ≫ Enterprise Linux Desktop Version7.0
Redhat ≫ Enterprise Linux Server Version7.0
Redhat ≫ Enterprise Linux Server Aus Version6.4
Redhat ≫ Enterprise Linux Server Aus Version6.5
Redhat ≫ Enterprise Linux Server Aus Version6.6
Redhat ≫ Enterprise Linux Server Aus Version7.2
Redhat ≫ Enterprise Linux Server Aus Version7.3
Redhat ≫ Enterprise Linux Server Aus Version7.4
Redhat ≫ Enterprise Linux Server Eus Version6.4
Redhat ≫ Enterprise Linux Server Eus Version6.7
Redhat ≫ Enterprise Linux Server Eus Version7.2
Redhat ≫ Enterprise Linux Server Eus Version7.3
Redhat ≫ Enterprise Linux Server Eus Version7.4
Redhat ≫ Enterprise Linux Server Eus Version7.5
Redhat ≫ Enterprise Linux Server Tus Version6.6
Redhat ≫ Enterprise Linux Server Tus Version7.2
Redhat ≫ Enterprise Linux Server Tus Version7.3
Redhat ≫ Enterprise Linux Server Tus Version7.4
Redhat ≫ Enterprise Linux Workstation Version7.0
Linux ≫ Linux Kernel Version >= 4.9 < 4.18
Linux ≫ Linux Kernel Version4.18 Updaterc1
Linux ≫ Linux Kernel Version4.18 Updaterc2
Linux ≫ Linux Kernel Version4.18 Updaterc3
Linux ≫ Linux Kernel Version4.18 Updaterc4
Linux ≫ Linux Kernel Version4.18 Updaterc5
Linux ≫ Linux Kernel Version4.18 Updaterc6
Canonical ≫ Ubuntu Linux Version12.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Hp ≫ Aruba Airwave Amp Version < 8.2.7.1
Hp ≫ Aruba Clearpass Policy Manager Version >= 6.6.0 <= 6.6.9
Hp ≫ Aruba Clearpass Policy Manager Version >= 6.7.0 <= 6.7.5
F5 ≫ Big-ip Access Policy Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Access Policy Manager Version14.0.0
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version14.0.0
F5 ≫ Big-ip Analytics Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Analytics Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Analytics Version14.0.0
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Application Acceleration Manager Version14.0.0
F5 ≫ Big-ip Application Security Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Application Security Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Application Security Manager Version14.0.0
F5 ≫ Big-ip Domain Name System Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Domain Name System Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Domain Name System Version14.0.0
F5 ≫ Big-ip Edge Gateway Version >= 11.5.1. <= 11.6.3
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Edge Gateway Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Edge Gateway Version14.0.0
F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Fraud Protection Service Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Fraud Protection Service Version14.0.0
F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Global Traffic Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Global Traffic Manager Version14.0.0
F5 ≫ Big-ip Link Controller Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Link Controller Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Link Controller Version14.0.0
F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Local Traffic Manager Version >= 12.0.0 <= 12.1.3
F5 ≫ Big-ip Local Traffic Manager Version > 13.0.0 <= 13.1.1
F5 ≫ Big-ip Local Traffic Manager Version14.0.0
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Policy Enforcement Manager Version14.0.0
F5 ≫ Big-ip Webaccelerator Version >= 11.5.1 <= 11.6.3
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.3
F5 ≫ Big-ip Webaccelerator Version >= 13.0.0 <= 13.1.1
F5 ≫ Big-ip Webaccelerator Version14.0.0
F5 ≫ Traffix Systems Signaling Delivery Controller Version >= 5.0.0 <= 5.1.0
F5 ≫ Traffix Systems Signaling Delivery Controller Version4.4.0
A10networks ≫ Advanced Core Operating System Version3.2.2
A10networks ≫ Advanced Core Operating System Version3.2.2 Updatep5
A10networks ≫ Advanced Core Operating System Version4.1.0
A10networks ≫ Advanced Core Operating System Version4.1.0 Updatep11
A10networks ≫ Advanced Core Operating System Version4.1.1 Updatep8
A10networks ≫ Advanced Core Operating System Version4.1.2
A10networks ≫ Advanced Core Operating System Version4.1.2 Updatep4
A10networks ≫ Advanced Core Operating System Version4.1.4
A10networks ≫ Advanced Core Operating System Version4.1.4 Updatep1
Cisco ≫ Collaboration Meeting Rooms Version1.0
Cisco ≫ Digital Network Architecture Center Version1.2
Cisco ≫ Expressway Versionx8.10
Cisco ≫ Expressway Versionx8.10.1
Cisco ≫ Expressway Versionx8.10.2
Cisco ≫ Expressway Versionx8.10.3
Cisco ≫ Expressway Versionx8.10.4
Cisco ≫ Expressway Versionx8.11
Cisco ≫ Expressway Series Version-
Cisco ≫ Meeting Management Version1.0
Cisco ≫ Meeting Management Version1.0.1
Cisco ≫ Network Assurance Engine Version2.1(1a)
Cisco ≫ Threat Grid-cloud Version-
Cisco ≫ Webex Hybrid Data Security Version-
Cisco ≫ Webex Video Mesh Version-
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.10
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.10.1
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.10.2
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.10.3
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.10.4
Cisco ≫ Telepresence Video Communication Server Firmware Versionx8.11
Cisco ≫ Telepresence Conductor Firmware Versionxc4.3
Cisco ≫ Telepresence Conductor Firmware Versionxc4.3.1
Cisco ≫ Telepresence Conductor Firmware Versionxc4.3.2
Cisco ≫ Telepresence Conductor Firmware Versionxc4.3.3
Cisco ≫ Telepresence Conductor Firmware Versionxc4.3.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.92% | 0.879 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.