{"id":"CVE-2018-5391","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5391","generatedAt":"2026-10-29T01:53:44.961Z","title":"The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly.","description":"The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.","published":"2018-09-06T21:29:00.000Z","lastModified":"2026-06-17T02:00:15.000Z","status":"Modified","sourceIdentifier":"cret@cert.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-400","CWE-20"],"affected":["linux/linux kernel","redhat/enterprise linux desktop","redhat/enterprise linux server","redhat/enterprise linux server aus","redhat/enterprise linux server eus","redhat/enterprise linux server tus","redhat/enterprise linux workstation","debian/debian linux","canonical/ubuntu linux","microsoft/windows 10","microsoft/windows 7","microsoft/windows 8.1","microsoft/windows rt 8.1","microsoft/windows server 2008","microsoft/windows server 2012","microsoft/windows server 2016","f5/big-ip access policy manager","f5/big-ip advanced firewall manager","f5/big-ip analytics","f5/big-ip application acceleration manager","f5/big-ip application security manager","f5/big-ip domain name system","f5/big-ip edge gateway","f5/big-ip fraud protection service","f5/big-ip global traffic manager","f5/big-ip link controller","f5/big-ip local traffic manager","f5/big-ip policy enforcement manager","f5/big-ip webaccelerator","siemens/ruggedcom rm1224 firmware","siemens/ruggedcom rox ii firmware","siemens/scalance m-800 firmware","siemens/scalance s615 firmware","siemens/scalance sc-600 firmware","siemens/scalance w1700 ieee 802.11ac firmware","siemens/scalance w700 ieee 802.11a\\/b\\/g\\/n firmware","siemens/simatic net cp 1242-7 firmware","siemens/simatic net cp 1243-1 firmware","siemens/simatic net cp 1243-7 lte eu firmware","siemens/simatic net cp 1243-7 lte us firmware","siemens/simatic net cp 1243-8 irc firmware","siemens/simatic net cp 1542sp-1 firmware","siemens/simatic net cp 1542sp-1 irc firmware","siemens/simatic net cp 1543-1 firmware","siemens/simatic net cp 1543sp-1 firmware","siemens/simatic rf185c firmware","siemens/simatic rf186c firmware","siemens/simatic rf186ci firmware","siemens/simatic rf188 firmware","siemens/simatic rf188ci firmware","siemens/sinema remote connect server firmware"],"epss":{"score":0.32445,"percentile":0.98325,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 32.4%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en","tags":["Broken Link"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/28/2","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/3","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/4","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"http://www.securityfocus.com/bid/105108","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1041476","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"http://www.securitytracker.com/id/1041637","tags":["Third Party Advisory","VDB Entry"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2785","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2791","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2846","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2924","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2925","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2933","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3083","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3096","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3459","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3540","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3586","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://access.redhat.com/errata/RHSA-2018:3590","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f","tags":["Patch","Vendor Advisory"],"source":"cret@cert.org"},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html","tags":["Mailing List","Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://security.netapp.com/advisory/ntap-20181003-0002/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://support.f5.com/csp/article/K74374841?utm_source=f5support&amp%3Butm_medium=RSS","source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3740-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3740-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3741-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3741-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3742-1/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://usn.ubuntu.com/3742-2/","tags":["Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.debian.org/security/2018/dsa-4272","tags":["Mitigation","Third Party Advisory"],"source":"cret@cert.org"},{"url":"https://www.kb.cert.org/vuls/id/641765","tags":["Third Party Advisory","US Government Resource"],"source":"cret@cert.org"},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/06/28/2","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/3","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2019/07/06/4","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/105108","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041476","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1041637","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2785","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2791","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2846","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2924","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2925","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2933","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3083","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3096","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3459","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3540","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3586","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2018:3590","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19f","tags":["Patch","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html","tags":["Mailing List","Mitigation","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5391","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}