Lucene search

[email protected]CVE-2018-5391

HistorySep 06, 2018 - 9:29 p.m.

CVE-2018-5391

2018-09-0621:29:00

CWE-400

CWE-20

[email protected]

web.nvd.nist.gov

461

In Wild

linux kernel

denial of service

cve-2018-5391

ip fragmentation

vulnerability

nvd

security

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Affected configurations

NVD

Node

linuxlinux_kernelRange3.9–4.18

Node

redhatenterprise_linux_desktopMatch6.0

redhatenterprise_linux_desktopMatch7.0

redhatenterprise_linux_serverMatch6.0

redhatenterprise_linux_serverMatch7.0

redhatenterprise_linux_server_ausMatch6.4

redhatenterprise_linux_server_ausMatch6.5

redhatenterprise_linux_server_ausMatch6.6

redhatenterprise_linux_server_ausMatch7.2

redhatenterprise_linux_server_ausMatch7.3

redhatenterprise_linux_server_ausMatch7.4

redhatenterprise_linux_server_eusMatch6.7

redhatenterprise_linux_server_eusMatch7.3

redhatenterprise_linux_server_eusMatch7.4

redhatenterprise_linux_server_eusMatch7.5

redhatenterprise_linux_server_tusMatch6.6

redhatenterprise_linux_server_tusMatch7.2

redhatenterprise_linux_server_tusMatch7.3

redhatenterprise_linux_server_tusMatch7.4

redhatenterprise_linux_workstationMatch6.0

redhatenterprise_linux_workstationMatch7.0

Node

debiandebian_linuxMatch8.0

debiandebian_linuxMatch9.0

Node

canonicalubuntu_linuxMatch12.04esm

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch16.04lts

canonicalubuntu_linuxMatch18.04lts

Node

microsoftwindows_10Match-

microsoftwindows_10Match1607

microsoftwindows_10Match1703

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_7Match-sp1

microsoftwindows_8.1Match-

microsoftwindows_rt_8.1Match-

microsoftwindows_server_2008Match-sp2

microsoftwindows_server_2008Matchr2sp1x64

microsoftwindows_server_2008Matchr2sp1itanium

microsoftwindows_server_2012Match-

microsoftwindows_server_2012Matchr2

microsoftwindows_server_2016Match-

microsoftwindows_server_2016Match1709

microsoftwindows_server_2016Match1803

Node

f5big-ip_access_policy_managerRange11.5.1–11.6.5.1

f5big-ip_access_policy_managerRange12.1.0–12.1.5

f5big-ip_access_policy_managerRange13.0.0–13.1.3

f5big-ip_access_policy_managerRange14.0.0–14.0.1.1

f5big-ip_access_policy_managerRange14.1.0–14.1.2.4

f5big-ip_advanced_firewall_managerRange11.5.1–11.6.5.1

f5big-ip_advanced_firewall_managerRange12.1.0–12.1.5

f5big-ip_advanced_firewall_managerRange13.0.0–13.1.3

f5big-ip_advanced_firewall_managerRange14.0.0–14.0.1.1

f5big-ip_advanced_firewall_managerRange14.1.0–14.1.2.4

f5big-ip_analyticsRange11.5.1–11.6.5.1

f5big-ip_analyticsRange12.1.0–12.1.5

f5big-ip_analyticsRange13.0.0–13.1.3

f5big-ip_analyticsRange14.0.0–14.0.1.1

f5big-ip_analyticsRange14.1.0–14.1.2.4

f5big-ip_application_acceleration_managerRange11.5.1–11.6.5.1

f5big-ip_application_acceleration_managerRange12.1.0–12.1.5

f5big-ip_application_acceleration_managerRange13.0.0–13.1.3

f5big-ip_application_acceleration_managerRange14.0.0–14.0.1.1

f5big-ip_application_acceleration_managerRange14.1.0–14.1.2.4

f5big-ip_application_security_managerRange11.5.1–11.6.5.1

f5big-ip_application_security_managerRange12.1.0–12.1.5

f5big-ip_application_security_managerRange13.0.0–13.1.3

f5big-ip_application_security_managerRange14.0.0–14.0.1.1

f5big-ip_application_security_managerRange14.1.0–14.1.2.4

f5big-ip_domain_name_systemRange11.5.1–11.6.5.1

f5big-ip_domain_name_systemRange12.1.0–12.1.5

f5big-ip_domain_name_systemRange13.0.0–13.1.3

f5big-ip_domain_name_systemRange14.0.0–14.0.1.1

f5big-ip_domain_name_systemRange14.1.0–14.1.2.4

f5big-ip_edge_gatewayRange11.5.1–11.6.5.1

f5big-ip_edge_gatewayRange12.1.0–12.1.5

f5big-ip_edge_gatewayRange13.0.0–13.1.3

f5big-ip_edge_gatewayRange14.0.0–14.0.1.1

f5big-ip_edge_gatewayRange14.1.0–14.1.2.4

f5big-ip_fraud_protection_serviceRange11.5.1–11.6.5.1

f5big-ip_fraud_protection_serviceRange12.1.0–12.1.5

f5big-ip_fraud_protection_serviceRange13.0.0–13.1.3

f5big-ip_fraud_protection_serviceRange14.0.0–14.0.1.1

f5big-ip_fraud_protection_serviceRange14.1.0–14.1.2.4

f5big-ip_global_traffic_managerRange11.5.1–11.6.5.1

f5big-ip_global_traffic_managerRange12.1.0–12.1.5

f5big-ip_global_traffic_managerRange13.0.0–13.1.3

f5big-ip_global_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_global_traffic_managerRange14.1.0–14.1.2.4

f5big-ip_link_controllerRange11.5.1–11.6.5.1

f5big-ip_link_controllerRange12.1.0–12.1.5

f5big-ip_link_controllerRange13.0.0–13.1.3

f5big-ip_link_controllerRange14.0.0–14.0.1.1

f5big-ip_link_controllerRange14.1.0–14.1.2.4

f5big-ip_local_traffic_managerRange11.5.1–11.6.5.1

f5big-ip_local_traffic_managerRange12.1.0–12.1.5

f5big-ip_local_traffic_managerRange13.0.0–13.1.3

f5big-ip_local_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_local_traffic_managerRange14.1.0–14.1.2.4

f5big-ip_policy_enforcement_managerRange11.5.1–11.6.5.1

f5big-ip_policy_enforcement_managerRange12.1.0–12.1.5

f5big-ip_policy_enforcement_managerRange13.0.0–13.1.3

f5big-ip_policy_enforcement_managerRange14.0.0–14.0.1.1

f5big-ip_policy_enforcement_managerRange14.1.0–14.1.2.4

f5big-ip_webacceleratorRange11.5.1–11.6.5.1

f5big-ip_webacceleratorRange12.1.0–12.1.5

f5big-ip_webacceleratorRange13.0.0–13.1.3

f5big-ip_webacceleratorRange14.0.0–14.0.1.1

f5big-ip_webacceleratorRange14.1.0–14.1.2.4

Node

siemensruggedcom_rm1224_firmwareRange<6.1

AND

siemensruggedcom_rm1224Match-

Node

siemensruggedcom_rox_ii_firmwareRange<2.13.3

AND

siemensruggedcom_rox_iiMatch-

Node

siemensscalance_m-800_firmwareRange<6.1

AND

siemensscalance_m-800Match-

Node

siemensscalance_s615_firmwareRange<6.1

AND

siemensscalance_s615Match-

Node

siemensscalance_sc-600_firmwareRange<2.0

AND

siemensscalance_sc-600Match-

Node

siemensscalance_w1700_ieee_802.11ac_firmwareRange<2.0

AND

siemensscalance_w1700_ieee_802.11acMatch-

Node

siemensscalance_w700_ieee_802.11a\/b\/g\/n_firmwareRange<6.4

AND

siemensscalance_w700_ieee_802.11a\/b\/g\/nMatch-

Node

siemenssimatic_net_cp_1242-7_firmwareRange<3.2

AND

siemenssimatic_net_cp_1242-7Match-

Node

siemenssimatic_net_cp_1243-1_firmwareRange<3.2

AND

siemenssimatic_net_cp_1243-1Match-

Node

siemenssimatic_net_cp_1243-7_lte_eu_firmwareRange<3.2

AND

siemenssimatic_net_cp_1243-7_lte_euMatch-

Node

siemenssimatic_net_cp_1243-7_lte_us_firmwareRange<3.2

AND

siemenssimatic_net_cp_1243-7_lte_usMatch-

Node

siemenssimatic_net_cp_1243-8_irc_firmwareRange<3.2

AND

siemenssimatic_net_cp_1243-8_ircMatch-

Node

siemenssimatic_net_cp_1542sp-1_firmwareRange<2.1

AND

siemenssimatic_net_cp_1542sp-1Match-

Node

siemenssimatic_net_cp_1542sp-1_irc_firmwareRange<2.1

AND

siemenssimatic_net_cp_1542sp-1_ircMatch-

Node

siemenssimatic_net_cp_1543-1_firmwareRange<2.2

AND

siemenssimatic_net_cp_1543-1Match-

Node

siemenssimatic_net_cp_1543sp-1_firmwareRange<2.1

AND

siemenssimatic_net_cp_1543sp-1Match-

Node

siemenssimatic_rf185c_firmwareRange<1.3

AND

siemenssimatic_rf185cMatch-

Node

siemenssimatic_rf186c_firmwareRange<1.3

AND

siemenssimatic_rf186cMatch-

Node

siemenssimatic_rf186ci_firmwareRange<1.3

AND

siemenssimatic_rf186ciMatch-

Node

siemenssimatic_rf188_firmwareRange<1.3

AND

siemenssimatic_rf188Match-

Node

siemenssimatic_rf188ci_firmwareRange<1.3

AND

siemenssimatic_rf188ciMatch-

Node

siemenssinema_remote_connect_server_firmwareRange1.1–2.0.1

AND

siemenssinema_remote_connect_serverMatch-

CPENameOperatorVersion
linux:linux_kernellinux linux kernelle4.18

CPE	Name	Operator	Version
linux:linux_kernel	linux linux kernel	le	4.18

CNA Affected

[
  {
    "product": "Kernel",
    "vendor": "Linux",
    "versions": [
      {
        "lessThan": "3.9*",
        "status": "affected",
        "version": "3.9",
        "versionType": "custom"
      }
    ]
  }
]