The vulnerability of the Linux operating system’s kernel, related to errors in processing fragmented IP packets, allows a hacker to cause a service failure.

🗓️ 13 Dec 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

A flaw in the Linux kernel's handling of fragmented Internet Protocol packets allows an attacker to crash services with crafted packets.

Reporter	Title	Published	Views	Family All 365
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a kernel vulnerability (CVE-2018-5391)	20 Feb 201916:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM	17 Dec 201814:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: This Power System update is being released to address CVE-2018-5391	7 Dec 202119:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Privileged Identity Manager Appliance.	17 Sep 201915:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)	31 Oct 201820:10	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM Java Runtime and the microcode shipped with the DS8000 Hardware Management Console (HMC)	3 Jun 201916:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by Red Hat kernel vulnerabilities	6 Mar 201920:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in the Linux kernel affects IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (CVE-2018-5391)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Kernel affects Power Hardware Management Console (CVE-2018-5391)	22 Sep 202123:05	–	ibm

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-en
openwall	www.openwall.com/lists/oss-security/2019/06/28/2
openwall	www.openwall.com/lists/oss-security/2019/07/06/3
openwall	www.openwall.com/lists/oss-security/2019/07/06/4
securityfocus	www.securityfocus.com/bid/105108
securitytracker	www.securitytracker.com/id/1041476
securitytracker	www.securitytracker.com/id/1041637
access	www.access.redhat.com/errata/RHSA-2018:2785
access	www.access.redhat.com/errata/RHSA-2018:2791

08 Oct 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 37.5

CVSS 27.8

EPSS0.24575

Linux kernel Fragmented packets Internet Protocol Service failure Crafted packets Malicious actor