CVE-2018-1000115 Denial of service in n/a
Attackers can cause denial of service via UDP traffic amplification if UDP support is enabled in Memcached.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1000115?
CVE-2018-1000115 is a high-severity denial of service vulnerability in Canonical Ubuntu Linux, published on 5 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.
Weakness: CWE-400
Which versions are affected by CVE-2018-1000115?
It affects 4 products.
Linux distribution packages (40)
instack-undercloud Red Hat:openstack-director:8::el7 | All versions | 0:2.2.7-13.el7ost |
openstack-tripleo-heat-templates Red Hat:openstack-director:8::el7 | All versions | 0:0.8.14-42.el7ost |
openstack-tripleo-heat-templates-kilo Red Hat:openstack-director:8::el7 | All versions | 0:0.8.14-42.el7ost |
instack-undercloud Red Hat:openstack-director:9::el7 | All versions | 0:4.0.0-18.el7ost |
openstack-tripleo-heat-templates Red Hat:openstack-director:9::el7 | All versions | 0:2.0.0-65.el7ost |
openstack-tripleo-heat-templates-liberty Red Hat:openstack-director:9::el7 | All versions | 0:2.0.0-65.el7ost |
instack-undercloud Red Hat:openstack:12::el7 | All versions | 0:7.4.12-1.el7ost |
openstack-tripleo-common Red Hat:openstack:12::el7 | All versions | 0:7.6.13-3.el7ost |
openstack-tripleo-common-container-base Red Hat:openstack:12::el7 | All versions | 0:7.6.13-3.el7ost |
openstack-tripleo-common-containers Red Hat:openstack:12::el7 | All versions | 0:7.6.13-3.el7ost |
openstack-tripleo-common-devtools Red Hat:openstack:12::el7 | All versions | 0:7.6.13-3.el7ost |
openstack-tripleo-heat-templates Red Hat:openstack:12::el7 | All versions | 0:7.0.12-8.el7ost |
openstack-tripleo-image-elements Red Hat:openstack:12::el7 | All versions | 0:7.0.5-1.el7ost |
openstack-tripleo-puppet-elements Red Hat:openstack:12::el7 | All versions | 0:7.0.7-1.el7ost |
os-net-config Red Hat:openstack:12::el7 | All versions | 0:7.3.6-1.el7ost |
puppet-aodh Red Hat:openstack:12::el7 | All versions | 0:11.4.0-2.el7ost |
puppet-ceilometer Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-ceph Red Hat:openstack:12::el7 | All versions | 0:2.4.2-2.el7ost |
puppet-cinder Red Hat:openstack:12::el7 | All versions | 0:11.5.0-4.el7ost |
puppet-glance Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-heat Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-ironic Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-keystone Red Hat:openstack:12::el7 | All versions | 0:11.4.0-2.el7ost |
puppet-manila Red Hat:openstack:12::el7 | All versions | 0:11.4.0-4.el7ost |
puppet-mistral Red Hat:openstack:12::el7 | All versions | 0:11.4.0-2.el7ost |
puppet-neutron Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-nova Red Hat:openstack:12::el7 | All versions | 0:11.5.0-4.el7ost |
puppet-panko Red Hat:openstack:12::el7 | All versions | 0:11.5.0-2.el7ost |
puppet-tripleo Red Hat:openstack:12::el7 | All versions | 0:7.4.12-8.el7ost |
puppet-trove Red Hat:openstack:12::el7 | All versions | 0:11.4.0-2.el7ost |
python-novajoin Red Hat:openstack:12::el7 | All versions | 0:1.0.17-3.el7ost |
python-os-brick Red Hat:openstack:12::el7 | All versions | 0:1.15.5-2.el7ost |
python-tripleoclient Red Hat:openstack:12::el7 | All versions | 0:7.3.10-3.el7ost |
memcached SUSE:Linux Enterprise Server 12 SP3 | All versions | 1.4.39-4.6.1 |
memcached SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | All versions | 1.4.39-4.6.1 |
memcached SUSE:Linux Enterprise Software Development Kit 11 SP4 | All versions | 1.2.6-5.17.3.1 |
crowbar-openstack SUSE:OpenStack Cloud 6 | All versions | 3.0+git.1521471181.2b39130da-39.10.1 |
crowbar-ha SUSE:OpenStack Cloud 7 | All versions | 4.0+git.1521473535.67d2302-4.28.1 |
crowbar-openstack SUSE:OpenStack Cloud 7 | All versions | 4.0+git.1522325467.43e431f91-9.30.1 |
memcached SUSE:Studio Onsite 1.3 | All versions | 1.2.6-5.17.3.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, Memcached Memcached, Redhat Openstack.
How do I fix CVE-2018-1000115?
Change a configuration setting.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-1000115 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-1000115 exists.
Public exploit code: 1 Metasploit module and 2 Exploit-DB entries.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as ALPINE-CVE-2018-1000115, DEBIAN-CVE-2018-1000115, GHSA-f4xm-w85j-gc55, MGASA-2018-0165, RHBA-2018:2140, RHSA-2018:2331 and 6 more.