SUSE-SU-2018:3787-1: kgraft-patch-SLE12-SP2_Update_15&distro=SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:3787-1 is a vulnerability in kgraft-patch-SLE12-SP2_Update_15&distro=SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 16-11-2018
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP2) This update for the Linux Kernel 4.4.90-92_50 fixes several issues. The following security issues were fixed: - CVE-2018-5391: Fixed a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may have caused a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098). - CVE-2018-18386: The drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bsc#1112039).

No weakness data has been published for this record.