VulnerabilityModified

CVE-2018-5391

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.

HIGH 7.5EPSS 32.4%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 32.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 32.45% probability · 98th percentile
CISA KEV: Not listed
Weakness: CWE-400, CWE-20
Affected: linux/linux kernel · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · debian/debian linux · canonical/ubuntu linux · microsoft/windows 10 · microsoft/windows 7 · microsoft/windows 8.1 · microsoft/windows rt 8.1 · microsoft/windows server 2008 · microsoft/windows server 2012 · microsoft/windows server 2016 · f5/big-ip access policy manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip application acceleration manager · +31 more
Source: cret@cert.org

References

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txtThird Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-enBroken Link
http://www.openwall.com/lists/oss-security/2019/06/28/2Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/06/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2019/07/06/4Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/105108Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041476Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041637Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:2785Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2791Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2846Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2924Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2925Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2933Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:2948Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3083Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3096Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3459Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3540Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3586Third Party Advisory
https://access.redhat.com/errata/RHSA-2018:3590Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdfThird Party Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19fPatch, Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/08/msg00014.htmlMailing List, Mitigation, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20181003-0002/Third Party Advisory
https://support.f5.com/csp/article/K74374841?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/3740-1/Third Party Advisory
https://usn.ubuntu.com/3740-2/Third Party Advisory
https://usn.ubuntu.com/3741-1/Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.