Published: 06/08/2018 Updated: 07/11/2023

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 694

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat enterprise linux desktop 7.0
redhat enterprise linux server aus 7.2
redhat enterprise linux workstation 7.0
redhat enterprise linux server tus 7.2
redhat enterprise linux server 7.0
redhat enterprise linux server aus 6.6
redhat enterprise linux server eus 7.2
redhat enterprise linux server aus 6.5
redhat enterprise linux server aus 6.4
redhat enterprise linux server tus 7.3
redhat enterprise linux server aus 7.3
redhat enterprise linux server aus 7.4
redhat enterprise linux server eus 7.3
redhat enterprise linux server eus 7.4
redhat virtualization 4.0
redhat enterprise linux server tus 7.4
redhat enterprise linux server eus 7.5
redhat enterprise linux server eus 6.4
redhat enterprise linux server eus 6.7
redhat enterprise linux server tus 6.6
linux linux kernel
linux linux kernel 4.18
canonical ubuntu linux 16.04
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04
canonical ubuntu linux 18.04
debian debian linux 8.0
debian debian linux 9.0
hp aruba clearpass policy manager
hp aruba airwave amp
f5 big-ip application acceleration manager
f5 big-ip advanced firewall manager
f5 big-ip analytics
f5 big-ip access policy manager
f5 big-ip application security manager
f5 big-ip link controller
f5 big-ip policy enforcement manager
f5 big-ip edge gateway
f5 big-ip global traffic manager
f5 big-ip webaccelerator
f5 big-ip local traffic manager
f5 big-ip domain name system
f5 big-ip fraud protection service
f5 big-ip local traffic manager 14.0.0
f5 big-ip application acceleration manager 14.0.0
f5 big-ip advanced firewall manager 14.0.0
f5 big-ip analytics 14.0.0
f5 big-ip access policy manager 14.0.0
f5 big-ip application security manager 14.0.0
f5 big-ip domain name system 14.0.0
f5 big-ip edge gateway 14.0.0
f5 big-ip fraud protection service 14.0.0
f5 big-ip global traffic manager 14.0.0
f5 big-ip link controller 14.0.0
f5 big-ip policy enforcement manager 14.0.0
f5 big-ip webaccelerator 14.0.0
f5 traffix systems signaling delivery controller 4.4.0
f5 traffix systems signaling delivery controller
a10networks advanced core operating system 3.2.2
a10networks advanced core operating system 4.1.0
a10networks advanced core operating system 4.1.1
a10networks advanced core operating system 4.1.2
a10networks advanced core operating system 4.1.4
cisco meeting management 1.0.1
cisco meeting management 1.0
cisco expressway series -
cisco collaboration meeting rooms 1.0
cisco webex video mesh -
cisco webex hybrid data security -
cisco network assurance engine 2.1\\(1a\\)
cisco digital network architecture center 1.2
cisco threat grid-cloud -
cisco expressway x8.10
cisco expressway x8.10.1
cisco expressway x8.10.2
cisco expressway x8.10.3
cisco expressway x8.10.4
cisco expressway x8.11
cisco telepresence_video_communication_server_firmware x8.10
cisco telepresence_video_communication_server_firmware x8.10.1
cisco telepresence_video_communication_server_firmware x8.10.2
cisco telepresence_video_communication_server_firmware x8.10.3
cisco telepresence_video_communication_server_firmware x8.10.4
cisco telepresence_video_communication_server_firmware x8.11
cisco telepresence_conductor_firmware xc4.3
cisco telepresence_conductor_firmware xc4.3.1
cisco telepresence_conductor_firmware xc4.3.2
cisco telepresence_conductor_firmware xc4.3.3
cisco telepresence_conductor_firmware xc4.3.4

Debian Bug report logs - #905751 linux: CVE-2018-5390 Package: src:linux; Maintainer for src:linux is Debian Kernel Team <debian-kernel@listsdebianorg>; Reported by: "Jamie" <darkshad9999@gmailcom> Date: Wed, 8 Aug 2018 22:45:02 UTC Severity: grave Merged with 905966 Found in versions linux/49110-1~deb8u1, li ...

Linux kernel versions 49+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service An attacker can induce a denial of service condition by sending specially modified packets within ongoing TCP sessions Maintaining the denial of service conditi ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 72 Advanced Update Support, Red Hat Enterprise Linux 72 Telco Extended Update Support, and Red Hat Enterprise Linux 72 Update Services ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 74 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (C ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 66 Advanced Update Support and Red Hat Enterprise Linux 66 Telco Extended Update SupportRed Hat Product Security has rated this update ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: rhvm-appliance security update Type/Severity Security Advisory: Important Topic An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vuln ...

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 73 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 65 Advanced Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 64 Advanced Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerabili ...

Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...

Synopsis Important: kernel security update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 67 Extended Update SupportRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...

Synopsis Important: redhat-virtualization-host security update Type/Severity Security Advisory: Important Topic An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7Red Hat Product Security has rated this ...

Synopsis Important: kernel-alt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several security issues were fixed in the Linux kernel ...

The system could be made unavailable if it received specially crafted network traffic ...

Several security issues were fixed in the Linux kernel ...

The system could be made to crash if it received specially crafted network traffic ...

Several security issues were fixed in the Linux kernel ...

USN-3742-2 introduced regressions in the Linux Hardware Enablement (HWE) kernel for Ubuntu 1204 ESM ...

The system could be made unavailable if it received specially crafted network traffic ...

A flaw named SegmentSmack was found in the way the Linux kernel handled specially crafted TCP packets A remote attacker could use this flaw to trigger time and calculation expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() functions by sending specially modified packets within ongoing TCP sessions which could lead to a CPU satur ...

On August 6, 2018, the Vulnerability Coordination team of the National Cyber Security Centre of Finland (NCSC-FI) and the CERT Coordination Center (CERT/CC) disclosed vulnerabilities in the TCP stacks that are used by the Linux and FreeBSD kernels These vulnerabilities are publicly known as SegmentSmack The vulnerabilities could allow an unauthen ...

There is a DoS vulnerability in the Linux Kernel versions 49+ known as a SegmentSmack attack Remote attackers may send TCP packets to Linux kernel to make it calls the very expensive functions tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() of the affected device which can lead to a denial of service Maintaining the denial of service conditio ...

CVE-2018-5390 Information about SegmentSmack findings ...

oss-sec mailing list archives   By Date By Thread </form>    Re: linux-distros membership application - Microsoft   From: Sasha Levin ...

Batten down the ports: Linux networking bug SegmentSmack could remotely crash systems

The Register • John Leyden • 07 Aug 2018

Patches incoming for kernel versions 4.9 and up

A networking flaw has been discovered in the Linux kernel that could trigger a remote denial-of-service attack. Versions 4.9 and up are "vulnerable to denial-of-service conditions with low rates of specially crafted packets", according to a US-CERT advisory this week. The bug is being tracked as SegmentSmack (CVE-2018-5390). SegmentSmack – which sounds a bit like an American wrestler whose speciality is to close bouts just before an ad break – has prompted fixes for a wide variety of network...

CVE-2018-5390

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Recent Articles

References

Vulmon Search

About

Products

Connect