CVE-2018-5391 Denial of service in Kernel
An attacker can cause a denial of service in the Linux kernel by sending specially crafted IP fragments, affecting system availability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-5391?
CVE-2018-5391 is a high-severity denial of service vulnerability in Canonical Ubuntu Linux, published on 6 Sep 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
Which versions are affected by CVE-2018-5391?
It affects 51 products.
Linux distribution packages (22)
kgraft-patch-SLE12-SP3_Update_10 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 8-2.1 |
kgraft-patch-SLE12-SP3_Update_11 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 8-2.1 |
kgraft-patch-SLE12-SP3_Update_12 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 6-2.1 |
kgraft-patch-SLE12-SP3_Update_13 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 6-2.1 |
kgraft-patch-SLE12-SP3_Update_14 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 5-2.1 |
kgraft-patch-SLE12-SP3_Update_15 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 5-2.1 |
kgraft-patch-SLE12-SP3_Update_8 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 9-2.1 |
kgraft-patch-SLE12-SP3_Update_9 SUSE:Linux Enterprise Live Patching 12 SP3 | All versions | 9-2.1 |
kernel-livepatch-SLE15_Update_1 SUSE:Linux Enterprise Live Patching 15 | All versions | 6-2.1 |
kernel-livepatch-SLE15_Update_2 SUSE:Linux Enterprise Live Patching 15 | All versions | 6-2.1 |
kgraft-patch-SLE12-SP2_Update_18 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 9-2.1 |
kgraft-patch-SLE12-SP2_Update_19 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 9-2.1 |
kgraft-patch-SLE12-SP2_Update_20 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 8-2.1 |
kgraft-patch-SLE12-SP2_Update_21 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 7-2.1 |
kgraft-patch-SLE12-SP2_Update_22 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 7-2.1 |
kgraft-patch-SLE12-SP2_Update_23 SUSE:Linux Enterprise Server 12 SP2-LTSS | All versions | 5-2.1 |
kgraft-patch-SLE12-SP2_Update_18 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 9-2.1 |
kgraft-patch-SLE12-SP2_Update_19 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 9-2.1 |
kgraft-patch-SLE12-SP2_Update_20 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 8-2.1 |
kgraft-patch-SLE12-SP2_Update_21 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 7-2.1 |
kgraft-patch-SLE12-SP2_Update_22 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 7-2.1 |
kgraft-patch-SLE12-SP2_Update_23 SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | All versions | 5-2.1 |
Products include Canonical Ubuntu Linux, Debian Debian Linux, F5 Big-Ip Access Policy Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Application Acceleration Manager and 45 more.
How do I fix CVE-2018-5391?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2018-5391 being exploited?
There is no known exploitation of CVE-2018-5391 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as DEBIAN-CVE-2018-5391, DSA-4272-1, GHSA-p6x5-xg7h-fj5h, SUSE-SU-2018:3792-1, SUSE-SU-2018:3860-1, SUSE-SU-2018:3881-1 and 1 more.