NetSight
IP …
high7.5

CVE-2018-5390

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can…

Impact

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Affected products

VendorProductAffected versions
RedhatVirtualization
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5, 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 6.4, 6.7, 7.2, 7.3, 7.4, 7.5
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Workstation
Version 7.0
LinuxLinux Kernel
from 4.9 before 4.18
Version 4.18
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0
HpAruba Airwave Amp
before 8.2.7.1
HpAruba Clearpass Policy Manager
from 6.6.0 through 6.6.9
from 6.7.0 through 6.7.5

Weakness classification

CWE-400

References