CVEvulnerability

CVE-2018-5391

7.5 HIGH Published 2018-09-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-09-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20, CWE-400

Description

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Affected configurations

• linux linux kernel (>= 3.9 <= 4.18) • redhat enterprise linux desktop 6.0 • redhat enterprise linux desktop 7.0 • redhat enterprise linux server 6.0 • redhat enterprise linux server 7.0 • redhat enterprise linux server aus 6.4 • redhat enterprise linux server aus 6.5 • redhat enterprise linux server aus 6.6 • redhat enterprise linux server aus 7.2 • redhat enterprise linux server aus 7.3 • redhat enterprise linux server aus 7.4 • redhat enterprise linux server eus 6.7 • redhat enterprise linux server eus 7.3 • redhat enterprise linux server eus 7.4 • redhat enterprise linux server eus 7.5 • redhat enterprise linux server tus 6.6 • redhat enterprise linux server tus 7.2 • redhat enterprise linux server tus 7.3 • redhat enterprise linux server tus 7.4 • redhat enterprise linux workstation 6.0 • redhat enterprise linux workstation 7.0 • debian debian linux 8.0 • debian debian linux 9.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 16.04 • canonical ubuntu linux 18.04 • microsoft windows 10 • microsoft windows 10 1607 • microsoft windows 10 1703 • microsoft windows 10 1709 • microsoft windows 10 1803 • microsoft windows 7 • microsoft windows 8.1 • microsoft windows rt 8.1 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows server 2012 r2 • microsoft windows server 2016 • microsoft windows server 2016 1709 • microsoft windows server 2016 1803 • f5 big-ip access policy manager (>= 11.5.1 < 11.6.5.1) • f5 big-ip access policy manager (>= 12.1.0 < 12.1.5) • f5 big-ip access policy manager (>= 13.0.0 < 13.1.3) • f5 big-ip access policy manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip access policy manager (>= 14.1.0 < 14.1.2.4) • f5 big-ip advanced firewall manager (>= 11.5.1 < 11.6.5.1) • f5 big-ip advanced firewall manager (>= 12.1.0 < 12.1.5) • f5 big-ip advanced firewall manager (>= 13.0.0 < 13.1.3) • f5 big-ip advanced firewall manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip advanced firewall manager (>= 14.1.0 < 14.1.2.4) • f5 big-ip analytics (>= 11.5.1 < 11.6.5.1) • f5 big-ip analytics (>= 12.1.0 < 12.1.5) • f5 big-ip analytics (>= 13.0.0 < 13.1.3) • f5 big-ip analytics (>= 14.0.0 < 14.0.1.1) • f5 big-ip analytics (>= 14.1.0 < 14.1.2.4) • f5 big-ip application acceleration manager (>= 11.5.1 < 11.6.5.1) • f5 big-ip application acceleration manager (>= 12.1.0 < 12.1.5) • f5 big-ip application acceleration manager (>= 13.0.0 < 13.1.3) … and 69 more

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-400 Uncontrolled Resource Consumption weakness

References