QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-5390

Back to search

CVE-2018-5390

Published: Aug 6, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

VendorProductVersions

Linux

Linux Kernel

affected
4.9 - < 4.9*

Weaknesses (CWE)

CWE-400

References

RHSA-2018:2785
vendor-advisory
x_refsource_REDHAT
VU#962459
third-party-advisory
x_refsource_CERT-VN
USN-3741-2
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:2776
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2933
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2403
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2395
vendor-advisory
x_refsource_REDHAT
USN-3763-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:2384
vendor-advisory
x_refsource_REDHAT
USN-3741-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:2402
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2948
vendor-advisory
x_refsource_REDHAT
USN-3742-2
vendor-advisory
x_refsource_UBUNTU
1041434
vdb-entry
x_refsource_SECTRACK
USN-3732-2
vendor-advisory
x_refsource_UBUNTU
104976
vdb-entry
x_refsource_BID
1041424
vdb-entry
x_refsource_SECTRACK
USN-3742-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:2924
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2789
vendor-advisory
x_refsource_REDHAT
DSA-4266
vendor-advisory
x_refsource_DEBIAN
RHSA-2018:2645
vendor-advisory
x_refsource_REDHAT
USN-3732-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2018:2791
vendor-advisory
x_refsource_REDHAT
RHSA-2018:2790
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2018-5390 - Security Vulnerability | QwikSec