September 2018 Patch Tuesday: Microsoft fixes actively exploited zero-day
60
CVE-2018-5391
—CVSS 3.1
7.5 high
EPSS
32%p98
Published
()
Modified
Description
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
- Vendors
- linuxredhatdebiancanonicalmicrosoftf5siemens
- Products
- linux kernel, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation, debian linux, ubuntu linux, windows 10, windows 7, windows 8.1
- Weakness
- CWE-400, CWE-20
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
In the news2 stories
35