The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfo | Apr 27, 2020 | Sep 6, 2018 |
| Amazon_linux | — | Upgrade kernel | Aug 15, 2018 | Aug 10, 2018 |
| Arista Eos | — | Upgrade to a remediated version of EOS | Sep 4, 2024 | Aug 14, 2018 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Oct 11, 2018 | Aug 14, 2018 |
| Cisco Ios | — | Upgrade to the latest version of Cisco IOS to resolve this vulnerability | Oct 11, 2018 | Sep 6, 2018 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Sep 6, 2018 |
| Debian | — | Upgrade linux | Aug 16, 2018 | Aug 14, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Aug 20, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perf | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Sep 4, 2018 | Aug 14, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade perf | Mar 11, 2019 | Sep 6, 2018 |
| Msft | — | 2018-09 Security Only Quality Update for Windows Server 2008 for x86-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x64-based Systems (KB4457140)2018-09 Security Only Quality Update for Windows 8.1 for x64-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Server 2008 R2 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 R2 for Itanium-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Server 2008 for Itanium-based Systems (KB4457984)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x64-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded Standard 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows 8.1 for x86-based Systems (KB4457143)2018-09 Security Only Quality Update for Windows 7 for x86-based Systems (KB4457145)2018-09 Security Only Quality Update for Windows Embedded 8 Standard for x86-based Systems (KB4457140) | Sep 11, 2018 | Sep 11, 2018 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 15, 2018 | Aug 14, 2018 |
| Panos | — | Update PAN-OS 8.0 to the latest workaround for your deviceUpdate PAN-OS 6.1 to the latest workaround for your deviceUpdate PAN-OS 8.1 to the latest workaround for your deviceUpdate PAN-OS 7.1 to the latest workaround for your device | Sep 20, 2018 | Aug 14, 2018 |
| Pulse Secure Pulse Connect Secure | — | Update Pulse Connect Secure to version 9.0R4 | Oct 28, 2020 | Sep 6, 2018 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Sep 26, 2018 | Sep 6, 2018 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-docs-azureUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-azure-base | Aug 17, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1098-snapdragonUpgrade linux-image-3.13.0-155-powerpc64-embUpgrade linux-image-4.15.0-1015-oemUpgrade linux-image-powerpc-e500Upgrade linux-image-4.4.0-1094-raspi2Upgrade linux-image-4.4.0-1031-kvmUpgrade linux-image-4.15.0-1017-gcpUpgrade linux-image-4.4.0-1027-awsUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-32-genericUpgrade linux-image-4.4.0-133-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1019-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-133-powerpc-smpUpgrade linux-image-3.13.0-155-powerpc-smpUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-3.13.0-155-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1019-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1021-azureUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1020-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-133-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-kvmUpgrade linux-image-4.15.0-32-lowlatencyUpgrade linux-image-3.13.0-155-powerpc64-smpUpgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-155-powerpc-e500mcUpgrade linux-image-4.4.0-133-powerpc64-smpUpgrade linux-image-4.15.0-32-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-133-genericUpgrade linux-image-azure-edgeUpgrade linux-image-4.4.0-1065-awsUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-155-generic-lpaeUpgrade linux-image-4.4.0-133-generic-lpaeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-32-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-155-genericUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-155-powerpc-e500Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-133-powerpc64-emb | Aug 18, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub