CVE-2018-5390

Advisory lineage Upstream: 0 Downstream: 56
Modified
Published: 06 Aug 2018, 20:00
Last modified:05 Aug 2024, 05:33

Vulnerability Summary

Overall Risk (default)
medium
33/100
CVSS Score
7.8 HIGH
v2.0 (nvd)
EPSS Score
10.6% MEDIUM
11% probability +3.76%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Aug 2018, 20:00
Published
Vulnerability first disclosed
05 Aug 2024, 05:33
Last Modified
Vulnerability information updated

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • v2.0•HIGH•Score: 7.8AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 10.60%• Percentile: 93%

Techniques & Countermeasures

  • CWE-400•Uncontrolled Resource Consumption

    The product does not properly control the allocation and maintenance of a limited resource.

Affected Systems

  • a10networks•advanced_core_operating_system

    3.2.2 | 3.2.2:p5 | 4.1.0 | 4.1.0:p11 | 4.1.1:p8 | 4.1.2 | 4.1.2:p4 | 4.1.4 | 4.1.4:p1

  • canonical•ubuntu_linux

    12.04 | 14.04 | 16.04 | 18.04

  • cisco•collaboration_meeting_rooms

    1.0

  • cisco•digital_network_architecture_center

    1.2

  • cisco•expressway

    x8.1.0 | x8.10.1 | x8.10.2 | x8.10.3 | x8.10.4 | x8.1.1

  • cisco•expressway_series

    na

  • cisco•meeting_management

    1.0 | 1.0.1

  • cisco•network_assurance_engine

    2.1\(1a\)

  • cisco•telepresence_conductor

    xc4.3 | xc4.3.1 | xc4.3.2 | xc4.3.3 | xc4.3.4

  • cisco•telepresence_video_communication_server

    x8.10 | x8.10.1 | x8.10.2 | x8.10.3 | x8.10.4 | x8.1.1

  • cisco•threat_grid-cloud

    na

  • cisco•webex_hybrid_data_security

    na

  • cisco•webex_video_mesh

    na

  • debian•debian_linux

    8.0 | 9.0

  • f5•big-ip_access_policy_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_advanced_firewall_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_analytics

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_application_acceleration_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_application_security_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_domain_name_system

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_edge_gateway

    ≥ 11.5.1., ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_fraud_protection_service

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_global_traffic_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_link_controller

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_local_traffic_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.0.0, ≤ 12.1.3 | > 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_policy_enforcement_manager

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•big-ip_webaccelerator

    ≥ 11.5.1, ≤ 11.6.3 | ≥ 12.1.0, ≤ 12.1.3 | ≥ 13.0.0, ≤ 13.1.1 | 14.0.0

  • f5•traffix_systems_signaling_delivery_controller

    ≥ 5.0.0, ≤ 5.1.0 | 4.4.0

  • hp•aruba_airwave_amp

    < 8.2.7.1

  • hp•aruba_clearpass_policy_manager

    ≥ 6.6.0, ≤ 6.6.9 | ≥ 6.7.0, ≤ 6.7.5

  • linux•linux_kernel

    ≥ 4.9, < 4.18 | 4.18:rc1 | 4.18:rc2 | 4.18:rc3 | 4.18:rc4 | 4.18:rc5 | 4.18:rc6 | ≥ 4.9, < 4.9*

  • redhat•enterprise_linux_desktop

    7.0

  • redhat•enterprise_linux_server

    7.0

  • redhat•enterprise_linux_server_aus

    6.4 | 6.5 | 6.6 | 7.2 | 7.3 | 7.4

  • redhat•enterprise_linux_server_eus

    6.4 | 6.7 | 7.2 | 7.3 | 7.4 | 7.5

  • redhat•enterprise_linux_server_tus

    6.6 | 7.2 | 7.3 | 7.4

  • redhat•enterprise_linux_workstation

    7.0

  • redhat•virtualization

    4.0

References (42)