The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Arista Eos | — | Upgrade to a remediated version of EOS | Sep 4, 2024 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 11, 2018 | Aug 14, 2018 |
| Cisco Ios | — | Upgrade to the latest version of Cisco IOS to resolve this vulnerability | Oct 11, 2018 | Sep 6, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade linux | Aug 16, 2018 | Aug 14, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perf | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perf | Mar 11, 2019 | Sep 6, 2018 |
| Msft | — | 2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows Server 2008 for Itanium-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4457984) | Sep 11, 2018 | Sep 11, 2018 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 15, 2018 | Aug 14, 2018 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Sep 20, 2018 | Aug 14, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Sep 6, 2018 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 26, 2018 | Sep 6, 2018 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-docs-azureUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default | Aug 17, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-genericUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-4.15.0-1021-azureUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-4.15.0-1019-awsUpgrade linux-image-4.15.0-32-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-4.4.0-133-powerpc64-embUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-generic-lts-trustyUpgrade linux-image-azure-edgeUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-powerpc-e500mc | Aug 18, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub