4.9
CVSSv2

CVE-2018-5803

Published: 12/06/2018 Updated: 27/03/2019
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

linux linux kernel

debian debian linux 7.0

debian debian linux 8.0

debian debian linux 9.0

redhat enterprise linux desktop 7.0

redhat enterprise linux server 7.0

redhat virtualization host 4.0

redhat enterprise linux workstation 7.0

Vendor Advisories

Synopsis Important: kernel-rt security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise MRG 2Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVS ...
Synopsis Important: kernel security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring S ...
Synopsis Important: kernel-rt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-rt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Sco ...
Synopsis Important: kernel security and bug fix update Type/Severity Security Advisory: Important Topic An update for kernel is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) b ...
Synopsis Important: kernel-alt security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic An update for kernel-alt is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Missing length check of payload in net/sctp/sm_make_chunkc:_sctp_make_chunk() function allows denial of service:An error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunkc) when handling SCTP, packet length can be exploited by a malicious local user to cause a kernel crash and a DoS (CVE-2018-5803) Mishandling mutex within libsas allo ...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-9016 Ming Lei reported a race condition in the multiqueue block layer (blk-mq) On a system with a driver using blk-mq (mtip32xx, null_blk, or virtio_blk), a local user might be able ...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-5715 Multiple researchers have discovered a vulnerability in various processors supporting speculative execution, enabling an attacker controlling an unprivileged process to read mem ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
Several security issues were addressed in the Linux kernel ...
Several security issues were addressed in the Linux kernel ...
Several security issues were fixed in the Linux kernel ...
An error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunkc) when handling SCTP, packet length can be exploited by a malicious local user to cause a kernel crash and a DoS ...

References

CWE-20https://www.spinics.net/lists/netdev/msg482523.htmlhttps://www.spinics.net/lists/linux-sctp/msg07036.htmlhttps://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/https://secuniaresearch.flexerasoftware.com/advisories/81331/https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9chttps://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102https://www.debian.org/security/2018/dsa-4188https://www.debian.org/security/2018/dsa-4187https://usn.ubuntu.com/3656-1/https://usn.ubuntu.com/3654-2/https://usn.ubuntu.com/3654-1/https://lists.debian.org/debian-lts-announce/2018/05/msg00000.htmlhttps://access.redhat.com/errata/RHSA-2018:1854https://usn.ubuntu.com/3698-2/https://usn.ubuntu.com/3697-2/https://usn.ubuntu.com/3697-1/https://usn.ubuntu.com/3698-1/https://access.redhat.com/errata/RHSA-2018:3096https://access.redhat.com/errata/RHSA-2018:3083https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2019:0641https://nvd.nist.govhttps://access.redhat.com/errata/RHSA-2019:0641https://usn.ubuntu.com/3698-1/https://access.redhat.com/errata/RHSA-2018:3083https://alas.aws.amazon.com/ALAS-2018-993.html