HIGH✓ PATCH🇬🇧 English

CVE-2018-5390

CVSS 7.5v3.1pub. 2018-08-06upd. 2024-11-21

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • A10networks Advanced Core Operating System

    OS
    A10Networks
    3.2.24.1.04.1.14.1.24.1.4

  • Canonical Ubuntu

    OS
    Canonical
    12.0414.0416.0418.04

  • Cisco Collaboration Meeting Rooms

    APP
    Cisco
    1.0

  • Cisco Digital Network Architecture Center

    APP
    Cisco
    1.2

  • Cisco Expressway

    APP
    Cisco
    x8.10x8.10.1x8.10.2x8.10.3x8.10.4x8.11

  • Cisco Expressway Series

    APP
    Cisco
    wszystkie wersje

  • Cisco Meeting Management

    APP
    Cisco
    1.0

  • Debian

    OS
    Debian
    8.09.0

  • F5 Big Ip Access Policy Manager

    APP
    F5
    14.0.011.5.1 – 11.6.312.1.0 – 12.1.313.0.0 – 13.1.1

  • F5 Big Ip Advanced Firewall Manager

    APP
    F5
    14.0.013.0.0 – 13.1.111.5.1 – 11.6.312.1.0 – 12.1.3

  • F5 Big Ip Analytics

    APP
    F5
    14.0.011.5.1 – 11.6.313.0.0 – 13.1.112.1.0 – 12.1.3

  • F5 Big Ip Application Acceleration Manager

    APP
    F5
    14.0.013.0.0 – 13.1.111.5.1 – 11.6.312.1.0 – 12.1.3

  • F5 Big Ip Application Security Manager

    APP
    F5
    14.0.011.5.1 – 11.6.313.0.0 – 13.1.112.1.0 – 12.1.3

  • F5 Big Ip Domain Name System

    APP
    F5
    14.0.013.0.0 – 13.1.111.5.1 – 11.6.312.1.0 – 12.1.3

  • F5 Big Ip Edge Gateway

    APP
    F5
    14.0.011.5.1. – 11.6.312.1.0 – 12.1.313.0.0 – 13.1.1

  • F5 Big Ip Fraud Protection Service

    APP
    F5
    14.0.013.0.0 – 13.1.111.5.1 – 11.6.312.1.0 – 12.1.3

  • F5 Big Ip Global Traffic Manager

    APP
    F5
    14.0.011.5.1 – 11.6.312.1.0 – 12.1.313.0.0 – 13.1.1

  • F5 Big Ip Link Controller

    APP
    F5
    14.0.011.5.1 – 11.6.312.1.0 – 12.1.313.0.0 – 13.1.1

  • F5 Big Ip Local Traffic Manager

    APP
    F5
    14.0.0≤ 13.1.111.5.1 – 11.6.312.0.0 – 12.1.3

  • F5 Big Ip Policy Enforcement Manager

    APP
    F5
    14.0.011.5.1 – 11.6.313.0.0 – 13.1.112.1.0 – 12.1.3

  • F5 Big Ip Webaccelerator

    APP
    F5
    14.0.011.5.1 – 11.6.313.0.0 – 13.1.112.1.0 – 12.1.3

  • F5 Traffix Systems Signaling Delivery Controller

    APP
    F5
    4.4.05.0.0 – 5.1.0

  • HP Aruba Airwave Amp

    APP
    Hp
    < 8.2.7.1

  • HP Aruba Clearpass Policy Manager

    APP
    Hp
    6.7.0 – 6.7.56.6.0 – 6.6.9

  • Linux Kernel

    OS
    Linux
    4.184.9 – 4.18 (bez)

  • Red Hat Enterprise Linux Desktop

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux Server

    OS
    Redhat
    7.0

  • Red Hat Enterprise Linux Server Aus

    OS
    Redhat
    6.46.56.67.27.37.4

  • Red Hat Enterprise Linux Server Eus

    OS
    Redhat
    6.46.77.27.37.47.5

  • Red Hat Enterprise Linux Server Tus

    OS
    Redhat
    6.67.27.37.4
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2026-24061CRITICAL9.8⚠ KEVPL ✓ten sam produkt

GNU Inetutils telnetd: ominięcie uwierzytelnienia przez zmienną USER

CVE-2025-53521CRITICAL9.3⚠ KEVPL ✓ten sam produkt

RCE w F5 BIG-IP APM poprzez złośliwy ruch sieciowy (stack buffer overflow)

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2025-49113CRITICAL9.9⚠ KEVPL ✓ten sam produkt

RCE przez deserializację PHP w Roundcube Webmail (parametr _from)