Denial Of Service (DoS)

2020-04-1000:22:14

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

70.1%

JSON

kernel is vulnerable to denial of service. The possibility of a kernel crash was found in the Linux kernel IPsec protocol implementation, due to improper handling of fragmented ESP packets. When an attacker controlling an intermediate router fragmented these packets into very small pieces, it would cause a kernel crash on the receiving node during packet reassembly.

CPENameOperatorVersion
kerneleq2.6.18__8.1.14.el5
kerneleq2.6.18__8.1.3.el5
kerneleq2.6.18__8.1.3.lspp.80.el5
kerneleq2.6.18__8.1.8.el5
kerneleq2.6.18__53.1.4.el5
kerneleq2.6.18__8.1.3.lspp.81.el5
kerneleq2.6.18__8.1.1.el5
kerneleq2.6.18__53.1.14.el5
kerneleq2.6.18__8.1.4.el5
kerneleq2.6.18__53.el5

Name	Operator	Version
kernel	eq	2.6.18__8.1.14.el5
kernel	eq	2.6.18__8.1.3.el5
kernel	eq	2.6.18__8.1.3.lspp.80.el5
kernel	eq	2.6.18__8.1.8.el5
kernel	eq	2.6.18__53.1.4.el5
kernel	eq	2.6.18__8.1.3.lspp.81.el5
kernel	eq	2.6.18__8.1.1.el5
kernel	eq	2.6.18__53.1.14.el5
kernel	eq	2.6.18__8.1.4.el5
kernel	eq	2.6.18__53.el5