vulnerability

SUSE: CVE-2018-5390: SUSE Linux Security Advisory

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Aug 6, 2018
Added
Aug 8, 2018
Modified
Feb 4, 2022

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Solutions

suse-upgrade-dpdk-develsuse-upgrade-dpdk-thunderx-develsuse-upgrade-kernel-azure-basesuse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-default-mansuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-docssuse-upgrade-kernel-docs-azuresuse-upgrade-kernel-ec2suse-upgrade-kernel-ec2-develsuse-upgrade-kernel-ec2-extrasuse-upgrade-kernel-obs-buildsuse-upgrade-kernel-source-azuresuse-upgrade-kgraft-patch-3_12_61-52_101-defaultsuse-upgrade-kgraft-patch-3_12_61-52_101-xensuse-upgrade-kgraft-patch-3_12_61-52_106-defaultsuse-upgrade-kgraft-patch-3_12_61-52_106-xensuse-upgrade-kgraft-patch-3_12_61-52_111-defaultsuse-upgrade-kgraft-patch-3_12_61-52_111-xensuse-upgrade-kgraft-patch-3_12_61-52_119-defaultsuse-upgrade-kgraft-patch-3_12_61-52_119-xensuse-upgrade-kgraft-patch-3_12_61-52_122-defaultsuse-upgrade-kgraft-patch-3_12_61-52_122-xensuse-upgrade-kgraft-patch-3_12_61-52_125-defaultsuse-upgrade-kgraft-patch-3_12_61-52_125-xensuse-upgrade-kgraft-patch-3_12_61-52_128-defaultsuse-upgrade-kgraft-patch-3_12_61-52_128-xensuse-upgrade-kgraft-patch-3_12_61-52_133-defaultsuse-upgrade-kgraft-patch-3_12_61-52_133-xensuse-upgrade-kgraft-patch-3_12_61-52_136-defaultsuse-upgrade-kgraft-patch-3_12_61-52_136-xensuse-upgrade-kgraft-patch-3_12_61-52_141-defaultsuse-upgrade-kgraft-patch-3_12_61-52_141-xensuse-upgrade-kgraft-patch-3_12_61-52_146-defaultsuse-upgrade-kgraft-patch-3_12_61-52_146-xensuse-upgrade-kgraft-patch-3_12_61-52_149-defaultsuse-upgrade-kgraft-patch-3_12_61-52_149-xensuse-upgrade-kgraft-patch-3_12_61-52_92-defaultsuse-upgrade-kgraft-patch-3_12_61-52_92-xen

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.