imPC@ndo IT

Tracker / CVE-2018-5390

CVE-2018-5390

High 7.5

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Affected products and versions

a10networks advanced_core_operating_system
canonical ubuntu_linux
cisco collaboration_meeting_rooms
cisco digital_network_architecture_center
cisco expressway
cisco expressway_series
cisco meeting_management
cisco network_assurance_engine
cisco telepresence_conductor_firmware
cisco telepresence_video_communication_server_firmware
cisco threat_grid-cloud
cisco webex_hybrid_data_security
cisco webex_video_mesh
debian debian_linux
f5 big-ip_access_policy_manager
f5 big-ip_access_policy_manager · 11.5.1 → 11.6.3
f5 big-ip_access_policy_manager · 12.1.0 → 12.1.3
f5 big-ip_access_policy_manager · 13.0.0 → 13.1.1
f5 big-ip_advanced_firewall_manager
f5 big-ip_advanced_firewall_manager · 11.5.1 → 11.6.3
f5 big-ip_advanced_firewall_manager · 12.1.0 → 12.1.3
f5 big-ip_advanced_firewall_manager · 13.0.0 → 13.1.1
f5 big-ip_analytics
f5 big-ip_analytics · 11.5.1 → 11.6.3
f5 big-ip_analytics · 12.1.0 → 12.1.3
f5 big-ip_analytics · 13.0.0 → 13.1.1
f5 big-ip_application_acceleration_manager
f5 big-ip_application_acceleration_manager · 11.5.1 → 11.6.3
f5 big-ip_application_acceleration_manager · 12.1.0 → 12.1.3
f5 big-ip_application_acceleration_manager · 13.0.0 → 13.1.1
f5 big-ip_application_security_manager
f5 big-ip_application_security_manager · 11.5.1 → 11.6.3
f5 big-ip_application_security_manager · 12.1.0 → 12.1.3
f5 big-ip_application_security_manager · 13.0.0 → 13.1.1
f5 big-ip_domain_name_system
f5 big-ip_domain_name_system · 11.5.1 → 11.6.3
f5 big-ip_domain_name_system · 12.1.0 → 12.1.3
f5 big-ip_domain_name_system · 13.0.0 → 13.1.1
f5 big-ip_edge_gateway
f5 big-ip_edge_gateway · 11.5.1. → 11.6.3
f5 big-ip_edge_gateway · 12.1.0 → 12.1.3
f5 big-ip_edge_gateway · 13.0.0 → 13.1.1
f5 big-ip_fraud_protection_service
f5 big-ip_fraud_protection_service · 11.5.1 → 11.6.3
f5 big-ip_fraud_protection_service · 12.1.0 → 12.1.3
f5 big-ip_fraud_protection_service · 13.0.0 → 13.1.1
f5 big-ip_global_traffic_manager
f5 big-ip_global_traffic_manager · 11.5.1 → 11.6.3
f5 big-ip_global_traffic_manager · 12.1.0 → 12.1.3
f5 big-ip_global_traffic_manager · 13.0.0 → 13.1.1
f5 big-ip_link_controller
f5 big-ip_link_controller · 11.5.1 → 11.6.3
f5 big-ip_link_controller · 12.1.0 → 12.1.3
f5 big-ip_link_controller · 13.0.0 → 13.1.1
f5 big-ip_local_traffic_manager
f5 big-ip_local_traffic_manager · 11.5.1 → 11.6.3
f5 big-ip_local_traffic_manager · 12.0.0 → 12.1.3
f5 big-ip_local_traffic_manager · 13.0.0 → 13.1.1
f5 big-ip_policy_enforcement_manager
f5 big-ip_policy_enforcement_manager · 11.5.1 → 11.6.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References