Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2018-5390 Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

🗓️ 06 Aug 2018 20:00:00Reported by certccType 
cvelist
 cvelist🔗 www.cve.org👁 24 Views

Linux kernel 4.9+ TCP denial of service vulnerabilit

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018
28 Jan 201917:05
–ibm
IBM Security Bulletins		Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801q
10 Oct 201821:05
–ibm
IBM Security Bulletins		Security Bulletin: This Power System update is being released to address CVE-2018-5390
7 Dec 202119:14
–ibm
IBM Security Bulletins		Security Bulletin: IBM API Connect is affected by multiple third-party vulnerabilities (Node.js, nghttp2, Linux, Intel CPU, Android)
31 Oct 201820:10
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities
3 Dec 201814:30
–ibm
Akamai Blog		Linux Kernel TCP Vulnerability
6 Aug 201816:15
–akamaiblog
Tenable Nessus		Amazon Linux 2 : kernel (ALAS-2018-1050)
7 Aug 201800:00
–nessus
Tenable Nessus		Amazon Linux AMI : kernel (ALAS-2018-1049)
7 Aug 201800:00
–nessus
Tenable Nessus		Arista Networks CloudVision Portal DoS (SA0036)
9 Jul 202000:00
–nessus
Tenable Nessus		Arista Networks EOS/vEOS SegmentSmack TCP DoS (SA0036)
17 Feb 202000:00
–nessus
Rows per page
[
  {
    "product": "Linux Kernel",
    "vendor": "Linux",
    "versions": [
      {
        "lessThan": "4.9*",
        "status": "affected",
        "version": "4.9",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 Jul 2020 02:22Current
7.5High risk
Vulners AI Score7.5
EPSS0.7354
CWE-400
linuxkerneltcpdenial of servicevulnerabilitycve-2018-5390tcp_collapse_ofo_queuetcp_prune_ofo_queue
24