Read the docs
TI-2018-03924 Aliases CVE-2018-5391GHSA-p6x5-xg7h-fj5h

Uncontrolled resource consumption in Linux Kernel

Priority MEDIUM 57CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 51 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, Red Hat and Microsoft. Impact type from CWE-400.

Summary

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

Why it matters now

EPSS 0.32445 98th percentileScored 2026-11-07
Fix Partial Red Hat: 13 advisoriesMicrosoft: 1 updateRed Hat: 51 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
LinuxKernel3.9 and later—No fix listedCNA
  • Kernel VendorLinux Affected 3.9 and later Fixed in — No fix listed CNA

CPE configurations NVD · 100

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*3.9 – 4.18VulnerableLinux
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*6.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 3.9 – 4.18 Vulnerable ·Linux
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:* Versions 6.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
Show 90 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*1607VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*1703VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*1709VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*1803VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*r2 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:itanium:*:*r2 sp1VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*r2VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*1709VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*1803VulnerableMicrosoft
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4VulnerableF5
cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*before 6.1VulnerableSiemens
cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:ruggedcom_rox_ii_firmware:*:*:*:*:*:*:*:*before 2.13.3VulnerableSiemens
cpe:2.3:h:siemens:ruggedcom_rox_ii:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*before 6.1VulnerableSiemens
cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*before 6.1VulnerableSiemens
cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*before 2.0VulnerableSiemens
cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_w1700_ieee_802.11ac_firmware:*:*:*:*:*:*:*:*before 2.0VulnerableSiemens
cpe:2.3:h:siemens:scalance_w1700_ieee_802.11ac:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:scalance_w700_ieee_802.11a\/b\/g\/n_firmware:*:*:*:*:*:*:*:*before 6.4VulnerableSiemens
cpe:2.3:h:siemens:scalance_w700_ieee_802.11a\/b\/g\/n:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1242-7_firmware:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1242-7:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-7_lte_eu:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-7_lte_us:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*before 3.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_firmware:*:*:*:*:*:*:*:*before 2.1VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1542sp-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*before 2.1VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:*before 2.2VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*before 2.1VulnerableSiemens
cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf188_firmware:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf188:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:*before 1.3VulnerableSiemens
cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
cpe:2.3:o:siemens:sinema_remote_connect_server_firmware:*:*:*:*:*:*:*:*1.1 to before 2.0.1VulnerableSiemens
cpe:2.3:h:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:*not specified by NVDRunning onSiemens
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* Versions 1607 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* Versions 1703 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* Versions 1709 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* Versions 1803 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* Versions r2 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:itanium:*:* Versions r2 sp1 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* Versions r2 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:* Versions 1709 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* Versions 1803 Vulnerable ·Microsoft
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 11.5.1 to before 11.6.5.1; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.3; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.2.4 Vulnerable ·F5
  • cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:* Versions before 6.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:ruggedcom_rox_ii_firmware:*:*:*:*:*:*:*:* Versions before 2.13.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:ruggedcom_rox_ii:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:* Versions before 6.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:* Versions before 6.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_w1700_ieee_802.11ac_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_w1700_ieee_802.11ac:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:scalance_w700_ieee_802.11a\/b\/g\/n_firmware:*:*:*:*:*:*:*:* Versions before 6.4 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:scalance_w700_ieee_802.11a\/b\/g\/n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1242-7_firmware:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1242-7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-7_lte_eu_firmware:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-7_lte_eu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-7_lte_us_firmware:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-7_lte_us:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:* Versions before 3.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_firmware:*:*:*:*:*:*:*:* Versions before 2.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1542sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:* Versions before 2.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:* Versions before 2.2 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:* Versions before 2.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf188_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf188:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:* Versions before 1.3 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens
  • cpe:2.3:o:siemens:sinema_remote_connect_server_firmware:*:*:*:*:*:*:*:* Versions 1.1 to before 2.0.1 Vulnerable ·Siemens
  • cpe:2.3:h:siemens:sinema_remote_connect_server:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siemens

Remediation

Red Hat 13 advisories

  • RHSA-2018:3590 Released 2018-11-13 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
  • RHSA-2018:3540 Released 2018-11-13 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.43.1.el7, kernel-abi-whitelists-3.10.0-693.43.1.el7, kernel-debug-3.10.0-693.43.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.43.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.43.1.el7, kernel-abi-whitelists-3.10.0-693.43.1.el7, kernel-bootwrapper-3.10.0-693.43.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.43.1.el7, kernel-tools-libs-devel-3.10.0-693.43.1.el7
  • RHSA-2018:3586 Released 2018-11-13 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt, kernel-rt-debug-1:3.10.0-693.43.1.rt56.630.el6rt, kernel-rt-debug-devel-1:3.10.0-693.43.1.rt56.630.el6rt +7
Show 10 more Red Hat advisories
  • RHSA-2018:3459 Released 2018-11-06 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.5) kernel-3.10.0-862.20.2.el7, kernel-abi-whitelists-3.10.0-862.20.2.el7, kernel-debug-3.10.0-862.20.2.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5) kernel-tools-libs-devel-3.10.0-862.20.2.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.5) kernel-3.10.0-862.20.2.el7, kernel-abi-whitelists-3.10.0-862.20.2.el7, kernel-bootwrapper-3.10.0-862.20.2.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.5) kernel-debug-devel-3.10.0-862.20.2.el7, kernel-tools-libs-devel-3.10.0-862.20.2.el7
  • RHSA-2018:3096 Released 2018-10-30 · Red Hat rating Important
    kernel-rt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux for Real Time (v. 7) kernel-rt-3.10.0-957.rt56.910.el7, kernel-rt-debug-3.10.0-957.rt56.910.el7, kernel-rt-debug-devel-3.10.0-957.rt56.910.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-957.rt56.910.el7, kernel-rt-debug-3.10.0-957.rt56.910.el7, kernel-rt-debug-devel-3.10.0-957.rt56.910.el7 +7
  • RHSA-2018:2948 Released 2018-10-30 · Red Hat rating Important
    kernel-alt security, bug fix, and enhancement update
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.el7a, kernel-abi-whitelists-4.14.0-115.el7a, kernel-alt-4.14.0-115.el7a +9
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.el7a, kernel-tools-libs-devel-4.14.0-115.el7a
  • RHSA-2018:3083 Released 2018-10-30 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-957.el7, kernel-3.10.0-957.el7, kernel-abi-whitelists-3.10.0-957.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.el7
    • Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-957.el7, kernel-3.10.0-957.el7, kernel-abi-whitelists-3.10.0-957.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.el7
    • Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-957.el7, kernel-3.10.0-957.el7, kernel-abi-whitelists-3.10.0-957.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-957.el7, kernel-tools-libs-devel-3.10.0-957.el7
    • Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-957.el7, kernel-3.10.0-957.el7, kernel-abi-whitelists-3.10.0-957.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-957.el7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-3.10.0-957.el7, kernel-abi-whitelists-3.10.0-957.el7, kernel-bootwrapper-3.10.0-957.el7 +10
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-3.10.0-957.el7, kernel-tools-libs-devel-3.10.0-957.el7
  • RHSA-2018:2925 Released 2018-10-17 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) kernel-2.6.32-573.65.2.el6, kernel-abi-whitelists-2.6.32-573.65.2.el6, kernel-debug-2.6.32-573.65.2.el6 +6
    • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf-2.6.32-573.65.2.el6
    • Red Hat Enterprise Linux Server EUS (v. 6.7) kernel-2.6.32-573.65.2.el6, kernel-abi-whitelists-2.6.32-573.65.2.el6, kernel-bootwrapper-2.6.32-573.65.2.el6 +9
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf-2.6.32-573.65.2.el6
  • RHSA-2018:2933 Released 2018-10-16 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.5) kernel-2.6.32-431.93.2.el6, kernel-abi-whitelists-2.6.32-431.93.2.el6, kernel-debug-2.6.32-431.93.2.el6 +6
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel-2.6.32-431.93.2.el6, python-perf-2.6.32-431.93.2.el6
  • RHSA-2018:2924 Released 2018-10-16 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
    • Red Hat Enterprise Linux Server Optional TUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
    • Red Hat Enterprise Linux Server TUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
  • RHSA-2018:2846 Released 2018-10-09 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-bootwrapper-2.6.32-754.6.3.el6 +9
    • Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.6.3.el6
  • RHSA-2018:2785 Released 2018-09-25 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.58.1.el7, kernel-abi-whitelists-3.10.0-514.58.1.el7, kernel-debug-3.10.0-514.58.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.58.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.58.1.el7, kernel-abi-whitelists-3.10.0-514.58.1.el7, kernel-bootwrapper-3.10.0-514.58.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.58.1.el7, kernel-tools-libs-devel-3.10.0-514.58.1.el7
  • RHSA-2018:2791 Released 2018-09-25 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.4) kernel-2.6.32-358.93.1.el6, kernel-debug-2.6.32-358.93.1.el6, kernel-debug-devel-2.6.32-358.93.1.el6 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel-2.6.32-358.93.1.el6, python-perf-2.6.32-358.93.1.el6

Microsoft 1 update

  • ADV180022
    Windows Denial of Service Vulnerability

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)Fixed RHSA-2018:2785
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux ComputeNode EUS (v. 7.5)Fixed RHSA-2018:3459
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)Fixed RHSA-2018:2785
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.5)Fixed RHSA-2018:3459
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux Server AUS (v. 6.4)Fixed RHSA-2018:2791
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2018:2933
Red Hat Enterprise Linux Server AUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server E4S (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Server EUS (v. 7.3)Fixed RHSA-2018:2785
Red Hat Enterprise Linux Server EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux Server EUS (v. 7.5)Fixed RHSA-2018:3459
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux Server Optional AUS (v. 6.4)Fixed RHSA-2018:2791
Red Hat Enterprise Linux Server Optional AUS (v. 6.5)Fixed RHSA-2018:2933
Red Hat Enterprise Linux Server Optional AUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server Optional E4S (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server Optional EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Server Optional EUS (v. 7.3)Fixed RHSA-2018:2785
Red Hat Enterprise Linux Server Optional EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux Server Optional EUS (v. 7.5)Fixed RHSA-2018:3459
Red Hat Enterprise Linux Server Optional TUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server Optional TUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server TUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server TUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:3083
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:2948, RHSA-2018:3083
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:2948, RHSA-2018:3083
Red Hat Enterprise Linux for Real Time (v. 7)Fixed RHSA-2018:3096
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2018:3096
Red Hat MRG Realtime for RHEL 6 Server v.2Fixed RHSA-2018:3586
Not affected: 6 products
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-5391
  2. 2026-10-03 Alias added: GHSA-p6x5-xg7h-fj5h

References

Patch 1

Advisory 29

Other 2

  • TI-2025-26358 tls: fix handling of zero-length records on the rx_list KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-38352 netfilter: bridge: make ebt_snat ARP rewrite writable KEVCVSS 3.1HIGH 8.8
  • TI-2013-05264 The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the… KEVCVSS 3.1HIGH 8.8
  • TI-2022-00125 Integer overflow in kernel KEVCVSS 3.1HIGH 8.4
  • TI-2013-01864 The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9… KEVCVSS 3.1HIGH 8.4
  • TI-2021-05514 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE KEVCVSS 3.1HIGH 8.3
See all 15278 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences