CVE Feed

    Dashboard / CVE / CVE-2018-5390

    CVE-2018-5390

    Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

    Published:Aug 6, 2018
    Last Modified:Nov 21, 2024
    EPS:Aug 6, 2018
    EPSS Score:0.19919
    CVSS Score:7.5

    Affected Products

    Vendor
    A10networks
    Product
    Advanced Core Operating System
    Vendor
    Canonical
    Product
    Ubuntu Linux
    Vendor
    Cisco
    Product
    Collaboration Meeting Rooms
    Vendor
    Cisco
    Product
    Digital Network Architecture Center
    Vendor
    Cisco
    Product
    Expressway
    Vendor
    Cisco
    Product
    Expressway Series
    Vendor
    Cisco
    Product
    Meeting Management
    Vendor
    Cisco
    Product
    Network Assurance Engine
    Vendor
    Cisco
    Product
    Telepresence Conductor
    Vendor
    Cisco
    Product
    Telepresence Conductor Firmware
    Vendor
    Cisco
    Product
    Telepresence Video Communication Server
    Vendor
    Cisco
    Product
    Telepresence Video Communication Server Firmware
    Vendor
    Cisco
    Product
    Threat Grid-cloud
    Vendor
    Cisco
    Product
    Webex Hybrid Data Security
    Vendor
    Cisco
    Product
    Webex Video Mesh
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    F5
    Product
    Big-ip Access Policy Manager
    Vendor
    F5
    Product
    Big-ip Advanced Firewall Manager
    Vendor
    F5
    Product
    Big-ip Analytics
    Vendor
    F5
    Product
    Big-ip Application Acceleration Manager
    Vendor
    F5
    Product
    Big-ip Application Security Manager
    Vendor
    F5
    Product
    Big-ip Domain Name System
    Vendor
    F5
    Product
    Big-ip Edge Gateway
    Vendor
    F5
    Product
    Big-ip Fraud Protection Service
    Vendor
    F5
    Product
    Big-ip Global Traffic Manager
    Vendor
    F5
    Product
    Big-ip Link Controller
    Vendor
    F5
    Product
    Big-ip Local Traffic Manager
    Vendor
    F5
    Product
    Big-ip Policy Enforcement Manager
    Vendor
    F5
    Product
    Big-ip Webaccelerator
    Vendor
    F5
    Product
    Traffix Systems Signaling Delivery Controller
    Vendor
    Hp
    Product
    Aruba Airwave Amp
    Vendor
    Hp
    Product
    Aruba Clearpass Policy Manager
    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation
    Vendor
    Redhat
    Product
    Enterprise Mrg
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Extras Rt
    Vendor
    Redhat
    Product
    Rhel Tus
    Vendor
    Redhat
    Product
    Virtualization

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-30369 (CVSS 7.8) — A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability a…
    CVE-2024-30368 (CVSS 8.8) — A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability. This vulnerability allow…
    CVE-2023-42130 (CVSS 8.8) — A10 Thunder ADC FileMgmtExport Directory Traversal Arbitrary File Read and Deletion Vulnerability. This vulner…
    CVE-2023-42129 (CVSS 6.5) — A10 Thunder ADC ShowTechDownloadView Directory Traversal Information Disclosure Vulnerability. This vulnerabil…
    CVE-2020-24384 (CVSS 9.8) — A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code …
    CVE-2016-10213 (CVSS 5.9) — A10 AX1030 and possibly other devices with software before 2.7.2-P8 uses random GCM nonce generations, which m…
    CVE-2014-3976 (CVSS 5) — Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P…

    References

    http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en
    http://www.openwall.com/lists/oss-security/2019/06/28/2
    http://www.openwall.com/lists/oss-security/2019/07/06/3
    http://www.openwall.com/lists/oss-security/2019/07/06/4
    http://www.securityfocus.com/bid/104976
    http://www.securitytracker.com/id/1041424
    http://www.securitytracker.com/id/1041434
    https://access.redhat.com/errata/RHSA-2018:2384
    https://access.redhat.com/errata/RHSA-2018:2395
    https://access.redhat.com/errata/RHSA-2018:2402
    https://access.redhat.com/errata/RHSA-2018:2403
    https://access.redhat.com/errata/RHSA-2018:2645
    https://access.redhat.com/errata/RHSA-2018:2776
    https://access.redhat.com/errata/RHSA-2018:2785
    https://access.redhat.com/errata/RHSA-2018:2789
    https://access.redhat.com/errata/RHSA-2018:2790
    https://access.redhat.com/errata/RHSA-2018:2791
    https://access.redhat.com/errata/RHSA-2018:2924
    https://access.redhat.com/errata/RHSA-2018:2933
    https://access.redhat.com/errata/RHSA-2018:2948
    https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf
    https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html
    https://security.netapp.com/advisory/ntap-20180815-0003/
    https://support.f5.com/csp/article/K95343321
    https://support.f5.com/csp/article/K95343321?utm_source=f5support&amp%3Butm_medium=RSS
    https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp
    https://usn.ubuntu.com/3732-1/
    https://usn.ubuntu.com/3732-2/
    https://usn.ubuntu.com/3741-1/
    https://usn.ubuntu.com/3741-2/
    https://usn.ubuntu.com/3742-1/
    https://usn.ubuntu.com/3742-2/
    https://usn.ubuntu.com/3763-1/
    https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack
    https://www.debian.org/security/2018/dsa-4266
    https://www.kb.cert.org/vuls/id/962459
    https://www.oracle.com/security-alerts/cpujul2020.html
    https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
    https://www.synology.com/support/security/Synology_SA_18_41
    http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt
    http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en
    http://www.openwall.com/lists/oss-security/2019/06/28/2
    http://www.openwall.com/lists/oss-security/2019/07/06/3
    http://www.openwall.com/lists/oss-security/2019/07/06/4
    http://www.securityfocus.com/bid/104976
    http://www.securitytracker.com/id/1041424
    http://www.securitytracker.com/id/1041434
    https://access.redhat.com/errata/RHSA-2018:2384
    https://access.redhat.com/errata/RHSA-2018:2395
    https://access.redhat.com/errata/RHSA-2018:2402
    https://access.redhat.com/errata/RHSA-2018:2403
    https://access.redhat.com/errata/RHSA-2018:2645
    https://access.redhat.com/errata/RHSA-2018:2776
    https://access.redhat.com/errata/RHSA-2018:2785
    https://access.redhat.com/errata/RHSA-2018:2789
    https://access.redhat.com/errata/RHSA-2018:2790
    https://access.redhat.com/errata/RHSA-2018:2791
    https://access.redhat.com/errata/RHSA-2018:2924
    https://access.redhat.com/errata/RHSA-2018:2933
    https://access.redhat.com/errata/RHSA-2018:2948
    https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf
    https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e
    https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
    https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html
    https://security.netapp.com/advisory/ntap-20180815-0003/
    https://support.f5.com/csp/article/K95343321
    https://support.f5.com/csp/article/K95343321?utm_source=f5support&amp%3Butm_medium=RSS
    https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp
    https://usn.ubuntu.com/3732-1/
    https://usn.ubuntu.com/3732-2/
    https://usn.ubuntu.com/3741-1/
    https://usn.ubuntu.com/3741-2/
    https://usn.ubuntu.com/3742-1/
    https://usn.ubuntu.com/3742-2/
    https://usn.ubuntu.com/3763-1/
    https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack
    https://www.debian.org/security/2018/dsa-4266
    https://www.kb.cert.org/vuls/id/962459
    https://www.oracle.com/security-alerts/cpujul2020.html
    https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
    https://www.synology.com/support/security/Synology_SA_18_41

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High