Lucene search

[email protected]NVD:CVE-2018-10938

HistoryAug 27, 2018 - 1:29 p.m.

CVE-2018-10938

2018-08-2713:29:00

CWE-835

[email protected]

web.nvd.nist.gov

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.

Affected configurations

Nvd

Node

linuxlinux_kernelMatch4.0

linuxlinux_kernelMatch4.0rc1

linuxlinux_kernelMatch4.0rc2

linuxlinux_kernelMatch4.0rc3

linuxlinux_kernelMatch4.0rc4

linuxlinux_kernelMatch4.0rc5

linuxlinux_kernelMatch4.0rc6

linuxlinux_kernelMatch4.0rc7

linuxlinux_kernelMatch4.1

linuxlinux_kernelMatch4.1rc1

linuxlinux_kernelMatch4.1rc2

linuxlinux_kernelMatch4.1rc3

linuxlinux_kernelMatch4.1rc4

linuxlinux_kernelMatch4.1rc5

linuxlinux_kernelMatch4.1rc6

linuxlinux_kernelMatch4.1rc7

linuxlinux_kernelMatch4.1rc8

linuxlinux_kernelMatch4.2

linuxlinux_kernelMatch4.2rc1

linuxlinux_kernelMatch4.2rc2

linuxlinux_kernelMatch4.2rc3

linuxlinux_kernelMatch4.2rc4

linuxlinux_kernelMatch4.2rc5

linuxlinux_kernelMatch4.2rc6

linuxlinux_kernelMatch4.2rc7

linuxlinux_kernelMatch4.2rc8

linuxlinux_kernelMatch4.3

linuxlinux_kernelMatch4.3rc1

linuxlinux_kernelMatch4.3rc2

linuxlinux_kernelMatch4.3rc3

linuxlinux_kernelMatch4.3rc4

linuxlinux_kernelMatch4.3rc5

linuxlinux_kernelMatch4.3rc6

linuxlinux_kernelMatch4.3rc7

linuxlinux_kernelMatch4.4

linuxlinux_kernelMatch4.4rc1

linuxlinux_kernelMatch4.4rc2

linuxlinux_kernelMatch4.4rc3

linuxlinux_kernelMatch4.4rc4

linuxlinux_kernelMatch4.4rc5

linuxlinux_kernelMatch4.4rc6

linuxlinux_kernelMatch4.4rc7

linuxlinux_kernelMatch4.4rc8

linuxlinux_kernelMatch4.5

linuxlinux_kernelMatch4.5rc1

linuxlinux_kernelMatch4.5rc2

linuxlinux_kernelMatch4.5rc3

linuxlinux_kernelMatch4.5rc4

linuxlinux_kernelMatch4.5rc5

linuxlinux_kernelMatch4.5rc6

linuxlinux_kernelMatch4.5rc7

linuxlinux_kernelMatch4.6

linuxlinux_kernelMatch4.6rc1

linuxlinux_kernelMatch4.6rc2

linuxlinux_kernelMatch4.6rc3

linuxlinux_kernelMatch4.6rc4

linuxlinux_kernelMatch4.6rc5

linuxlinux_kernelMatch4.6rc6

linuxlinux_kernelMatch4.6rc7

linuxlinux_kernelMatch4.7

linuxlinux_kernelMatch4.7rc1

linuxlinux_kernelMatch4.7rc2

linuxlinux_kernelMatch4.7rc3

linuxlinux_kernelMatch4.7rc4

linuxlinux_kernelMatch4.7rc5

linuxlinux_kernelMatch4.7rc6

linuxlinux_kernelMatch4.7rc7

linuxlinux_kernelMatch4.8

linuxlinux_kernelMatch4.8rc1

linuxlinux_kernelMatch4.8rc2

linuxlinux_kernelMatch4.8rc3

linuxlinux_kernelMatch4.8rc4

linuxlinux_kernelMatch4.8rc5

linuxlinux_kernelMatch4.8rc6

linuxlinux_kernelMatch4.8rc7

linuxlinux_kernelMatch4.8rc8

linuxlinux_kernelMatch4.9

linuxlinux_kernelMatch4.9rc1

linuxlinux_kernelMatch4.9rc2

linuxlinux_kernelMatch4.9rc3

linuxlinux_kernelMatch4.9rc4

linuxlinux_kernelMatch4.9rc5

linuxlinux_kernelMatch4.9rc6

linuxlinux_kernelMatch4.9rc7

linuxlinux_kernelMatch4.9rc8

linuxlinux_kernelMatch4.10

linuxlinux_kernelMatch4.10rc1

linuxlinux_kernelMatch4.10rc2

linuxlinux_kernelMatch4.10rc3

linuxlinux_kernelMatch4.10rc4

linuxlinux_kernelMatch4.10rc5

linuxlinux_kernelMatch4.10rc6

linuxlinux_kernelMatch4.10rc7

linuxlinux_kernelMatch4.10rc8

linuxlinux_kernelMatch4.11

linuxlinux_kernelMatch4.11rc1

linuxlinux_kernelMatch4.11rc2

linuxlinux_kernelMatch4.11rc3

linuxlinux_kernelMatch4.11rc4

linuxlinux_kernelMatch4.11rc5

linuxlinux_kernelMatch4.11rc6

linuxlinux_kernelMatch4.11rc7

linuxlinux_kernelMatch4.11rc8

linuxlinux_kernelMatch4.12

linuxlinux_kernelMatch4.12rc1

linuxlinux_kernelMatch4.12rc2

linuxlinux_kernelMatch4.12rc3

linuxlinux_kernelMatch4.12rc4

linuxlinux_kernelMatch4.12rc5

linuxlinux_kernelMatch4.12rc6

linuxlinux_kernelMatch4.12rc7

linuxlinux_kernelMatch4.13rc1

linuxlinux_kernelMatch4.13rc2

linuxlinux_kernelMatch4.13rc3

linuxlinux_kernelMatch4.13rc4

Node

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch16.04lts

debiandebian_linuxMatch9.0

References

seclists.org/oss-sec/2018/q3/179

www.securityfocus.com/bid/105154

www.securitytracker.com/id/1041569

bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10938

git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=40413955ee265a5e42f710940ec78f5450d49149

lists.debian.org/debian-lts-announce/2018/10/msg00003.html

usn.ubuntu.com/3797-1/

usn.ubuntu.com/3797-2/

www.debian.org/security/2018/dsa-4308

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

0.022

Percentile

89.6%

JSON

Related for NVD:CVE-2018-10938

f51 redhatcve1 cvelist1 debiancve1 ubuntucve1 cve1 prion1 openvas13 nessus15 cloudfoundry1 oraclelinux1 ubuntu2 photon2 symantec1 suse2 debian3 osv2 ibm1