7.8

CVE-2018-5391

The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 3.9 <= 4.18
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Canonical ≫ Ubuntu Linux Version 12.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Microsoft ≫ Windows 10 Version -
Microsoft ≫ Windows 10 Version 1607
Microsoft ≫ Windows 10 Version 1703
Microsoft ≫ Windows 10 Version 1709
Microsoft ≫ Windows 10 Version 1803
Microsoft ≫ Windows 7 Version - Update sp1
Microsoft ≫ Windows 8.1 Version -
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 2008 Version - Update sp2
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64
Microsoft ≫ Windows Server 2008 Version r2 Update sp1 SwPlatform itanium
Microsoft ≫ Windows Server 2016 Version 1709
Microsoft ≫ Windows Server 2016 Version 1803
F5 ≫ Big-ip Access Policy Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Access Policy Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Access Policy Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Analytics Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Analytics Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Analytics Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Analytics Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Analytics Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Application Security Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Application Security Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Application Security Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Application Security Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Domain Name System Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Domain Name System Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Domain Name System Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Domain Name System Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Domain Name System Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Edge Gateway Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Edge Gateway Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Edge Gateway Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Edge Gateway Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Fraud Protection Service Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Fraud Protection Service Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Fraud Protection Service Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Fraud Protection Service Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Fraud Protection Service Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Global Traffic Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Global Traffic Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Global Traffic Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Link Controller Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Link Controller Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Link Controller Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Link Controller Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Link Controller Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Local Traffic Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Local Traffic Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Local Traffic Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Local Traffic Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.1.0 < 14.1.2.4
F5 ≫ Big-ip Webaccelerator Version >= 11.5.1 < 11.6.5.1
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 < 12.1.5
F5 ≫ Big-ip Webaccelerator Version >= 13.0.0 < 13.1.3
F5 ≫ Big-ip Webaccelerator Version >= 14.0.0 < 14.0.1.1
F5 ≫ Big-ip Webaccelerator Version >= 14.1.0 < 14.1.2.4
Siemens ≫ Ruggedcom Rm1224 Firmware Version < 6.1
   Siemens ≫ Ruggedcom Rm1224 Version -
Siemens ≫ Ruggedcom Rox Ii Firmware Version < 2.13.3
   Siemens ≫ Ruggedcom Rox Ii Version -
Siemens ≫ Scalance M-800 Firmware Version < 6.1
   Siemens ≫ Scalance M-800 Version -
Siemens ≫ Scalance S615 Firmware Version < 6.1
   Siemens ≫ Scalance S615 Version -
Siemens ≫ Scalance Sc-600 Firmware Version < 2.0
   Siemens ≫ Scalance Sc-600 Version -
Siemens ≫ Simatic Rf185c Firmware Version < 1.3
   Siemens ≫ Simatic Rf185c Version -
Siemens ≫ Simatic Rf186c Firmware Version < 1.3
   Siemens ≫ Simatic Rf186c Version -
Siemens ≫ Simatic Rf186ci Firmware Version < 1.3
   Siemens ≫ Simatic Rf186ci Version -
Siemens ≫ Simatic Rf188 Firmware Version < 1.3
   Siemens ≫ Simatic Rf188 Version -
Siemens ≫ Simatic Rf188ci Firmware Version < 1.3
   Siemens ≫ Simatic Rf188ci Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 32.45% 0.982
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3096
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/06/28/2
Third Party Advisory
Mailing List
https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html
Third Party Advisory
Mailing List
https://access.redhat.com/errata/RHSA-2018:2785
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2791
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2924
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2925
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2933
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3540
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3586
Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3590
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html
Third Party Advisory
Mailing List
Mitigation
https://access.redhat.com/errata/RHSA-2018:3459
Third Party Advisory
https://usn.ubuntu.com/3742-1/
Third Party Advisory
https://usn.ubuntu.com/3742-2/
Third Party Advisory
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt
Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/06/3
Third Party Advisory
Mailing List
http://www.openwall.com/lists/oss-security/2019/07/06/4
Third Party Advisory
Mailing List
https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf
Third Party Advisory
https://usn.ubuntu.com/3741-1/
Third Party Advisory
https://usn.ubuntu.com/3741-2/
Third Party Advisory
https://usn.ubuntu.com/3740-1/
Third Party Advisory
https://usn.ubuntu.com/3740-2/
Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en
Broken Link
http://www.securityfocus.com/bid/105108
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041476
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041637
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2846
Third Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20181003-0002/
Third Party Advisory
https://support.f5.com/csp/article/K74374841?utm_source=f5support&amp%3Butm_medium=RSS
https://www.debian.org/security/2018/dsa-4272
Third Party Advisory
Mitigation
https://www.kb.cert.org/vuls/id/641765
Third Party Advisory
US Government Resource