NetSight
IP …
medium5.5

CVE-2018-5803

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk…

Impact

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.102
from 3.3 before 4.1.51
from 4.3 before 4.9.87
from 4.10 before 4.14.25
from 4.15 before 4.15.8
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatVirtualization Host
Version 4.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-20

References