NetSight
IP …
high7.5

CVE-2018-5391

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.

Impact

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.9 through 4.18
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 6.4, 6.5, 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 6.7, 7.3, 7.4, 7.5
RedhatEnterprise Linux Server Tus
Versions 6.6, 7.2, 7.3, 7.4
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04
MicrosoftWindows 10
All versions
Versions 1607, 1703, 1709, 1803
MicrosoftWindows 7
All versions
MicrosoftWindows 8.1
All versions

Weakness classification

CWE-400CWE-20

References