Cloudanix VulnDB

CVE-2018-5391

High · 7.5

CVSS

7.5

EPSS

32.4%

Published

Sep 6, 2018

CISA due date

—

The record

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Affected packages

Ecosystem Package Introduced Fixed
Debian:11 linux 0 4.17.15-1
Debian:12 linux 0 4.17.15-1
Debian:13 linux 0 4.17.15-1
Debian:8 linux 0 3.16.59-1
Debian:8 linux-4.9 0 4.9.110-3+deb9u2~deb8u1
Debian:8 linux-4.9 0 4.9.144-3.1~deb8u1
Debian:9 linux 0 4.9.110-3+deb9u2
Mageia:6 kernel 0 4.14.70-2.mga6
Mageia:6 kernel-linus 0 4.14.78-1.mga6
Mageia:6 kernel-tmb 0 4.14.78-1.mga6
Mageia:6 kernel-userspace-headers 0 4.14.70-2.mga6
Mageia:6 kmod-vboxadditions 0 5.2.18-6.mga6
Mageia:6 kmod-virtualbox 0 5.2.18-6.mga6
Mageia:6 kmod-xtables-addons 0 2.13-66.mga6
Red Hat:enterprise_linux:6::client kernel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-abi-whitelists 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-bootwrapper 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debug 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debug-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-i686 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-ppc64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-s390x 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-debuginfo-common-x86_64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-doc 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-firmware 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-headers 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client kernel-kdump-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client python-perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::client python-perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-abi-whitelists 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-bootwrapper 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debug-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-i686 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-ppc64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-s390x 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-debuginfo-common-x86_64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-doc 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-firmware 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-headers 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode kernel-kdump-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode python-perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::computenode python-perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-abi-whitelists 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-bootwrapper 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debug 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debug-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-i686 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-ppc64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-s390x 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-debuginfo-common-x86_64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-doc 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-firmware 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-headers 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server kernel-kdump-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server python-perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::server python-perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-abi-whitelists 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-bootwrapper 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debug-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-i686 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-ppc64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-s390x 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-debuginfo-common-x86_64 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-doc 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-firmware 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-headers 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation kernel-kdump-devel 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation python-perf 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:6::workstation python-perf-debuginfo 0 0:2.6.32-754.6.3.el6
Red Hat:enterprise_linux:7::client bpftool 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-abi-whitelists 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-bootwrapper 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debug 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debug-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debug-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-s390x 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-debuginfo-common-x86_64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-doc 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-headers 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-kdump 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-kdump-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-kdump-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-tools 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-tools-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client kernel-tools-libs-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client perf-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client python-perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::client python-perf-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode bpftool 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-abi-whitelists 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-bootwrapper 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debug 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debug-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-s390x 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-debuginfo-common-x86_64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-doc 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-headers 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-kdump-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-tools 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode kernel-tools-libs-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode perf-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode python-perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::computenode python-perf-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server bpftool 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-abi-whitelists 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-abi-whitelists 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-alt 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-bootwrapper 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-bootwrapper 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debug 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-debug 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debug-debuginfo 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-debug-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debug-devel 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-debug-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64le 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-ppc64le 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-s390x 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-debuginfo-common-x86_64 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-devel 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-doc 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-doc 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-headers 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-headers 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-kdump 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-kdump-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-kdump-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-tools 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-tools 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-tools-debuginfo 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-tools-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-tools-libs 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-tools-libs 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server kernel-tools-libs-devel 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server kernel-tools-libs-devel 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server perf 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server perf-debuginfo 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server perf-debuginfo 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server python-perf 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server python-perf 0 0:3.10.0-957.el7
Red Hat:enterprise_linux:7::server python-perf-debuginfo 0 0:4.14.0-115.el7a
Red Hat:enterprise_linux:7::server python-perf-debuginfo 0 0:3.10.0-957.el7

Related vulnerabilities