CVE-2018-5390

Published: Aug 6, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

Affected (125)

Products: Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Virtualization · Linux: Linux Kernel · Canonical: Ubuntu Linux · +5 more

Show all products

Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Server Aus, Enterprise Linux Server Eus, Enterprise Linux Server Tus, Enterprise Linux Workstation, Virtualization · Linux: Linux Kernel · Canonical: Ubuntu Linux · Debian: Debian Linux · Hp: Aruba Airwave Amp, Aruba Clearpass Policy Manager · F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Analytics, Big Ip Application Acceleration Manager, Big Ip Application Security Manager, Big Ip Domain Name System, Big Ip Edge Gateway, Big Ip Fraud Protection Service, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Local Traffic Manager, Big Ip Policy Enforcement Manager, Big Ip Webaccelerator, Traffix Systems Signaling Delivery Controller · A10networks: Advanced Core Operating System · Cisco: Collaboration Meeting Rooms, Digital Network Architecture Center, Expressway, Expressway Series, Meeting Management, Network Assurance Engine, Threat Grid Cloud, Webex Hybrid Data Security, Webex Video Mesh, Telepresence Video Communication Server Firmware, Telepresence Conductor Firmware

Redhat

7 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Eus

Enterprise Linux Server Tus

Enterprise Linux Workstation

1 product

1 product

1 product

2 products

Aruba Clearpass Policy Manager

14 products

Big Ip Access Policy Manager

Big Ip Advanced Firewall Manager

Big Ip Analytics

Big Ip Application Acceleration Manager

Big Ip Application Security Manager

Big Ip Domain Name System

Big Ip Edge Gateway

Big Ip Fraud Protection Service

Big Ip Global Traffic Manager

Big Ip Link Controller

Big Ip Local Traffic Manager

Big Ip Policy Enforcement Manager

Big Ip Webaccelerator

Traffix Systems Signaling Delivery Controller

A10networks

1 product

Advanced Core Operating System

Cisco

11 products

Collaboration Meeting Rooms

Digital Network Architecture Center

Expressway

Expressway Series

Meeting Management

Network Assurance Engine

Threat Grid Cloud

Webex Hybrid Data Security

Webex Video Mesh

Telepresence Video Communication Server Firmware

Telepresence Conductor Firmware

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 6.4
Redhat Enterprise Linux Server Aus	Version 6.5
Redhat Enterprise Linux Server Aus	Version 6.6
Redhat Enterprise Linux Server Aus	Version 7.2
Redhat Enterprise Linux Server Aus	Version 7.3
Redhat Enterprise Linux Server Aus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 6.4
Redhat Enterprise Linux Server Eus	Version 6.7
Redhat Enterprise Linux Server Eus	Version 7.2
Redhat Enterprise Linux Server Eus	Version 7.3
Redhat Enterprise Linux Server Eus	Version 7.4
Redhat Enterprise Linux Server Eus	Version 7.5
Redhat Enterprise Linux Server Tus	Version 6.6
Redhat Enterprise Linux Server Tus	Version 7.2
Redhat Enterprise Linux Server Tus	Version 7.3
Redhat Enterprise Linux Server Tus	Version 7.4
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Virtualization	Version 4.0

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 4.9 to 4.18
Linux Linux Kernel	Version 4.18 rc1
Linux Linux Kernel	Version 4.18 rc2
Linux Linux Kernel	Version 4.18 rc3
Linux Linux Kernel	Version 4.18 rc4
Linux Linux Kernel	Version 4.18 rc5
Linux Linux Kernel	Version 4.18 rc6

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Hp Aruba Airwave Amp	Before 8.2.7.1
Hp Aruba Clearpass Policy Manager	From 6.6.0 to 6.6.9
Hp Aruba Clearpass Policy Manager	From 6.7.0 to 6.7.5

Configuration F

54 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	From 11.5.1 to 11.6.3
F5 Big Ip Access Policy Manager	From 12.1.0 to 12.1.3
F5 Big Ip Access Policy Manager	From 13.0.0 to 13.1.1
F5 Big Ip Access Policy Manager	Version 14.0.0
F5 Big Ip Advanced Firewall Manager	From 11.5.1 to 11.6.3
F5 Big Ip Advanced Firewall Manager	From 12.1.0 to 12.1.3
F5 Big Ip Advanced Firewall Manager	From 13.0.0 to 13.1.1
F5 Big Ip Advanced Firewall Manager	Version 14.0.0
F5 Big Ip Analytics	From 11.5.1 to 11.6.3
F5 Big Ip Analytics	From 12.1.0 to 12.1.3
F5 Big Ip Analytics	From 13.0.0 to 13.1.1
F5 Big Ip Analytics	Version 14.0.0
F5 Big Ip Application Acceleration Manager	From 11.5.1 to 11.6.3
F5 Big Ip Application Acceleration Manager	From 12.1.0 to 12.1.3
F5 Big Ip Application Acceleration Manager	From 13.0.0 to 13.1.1
F5 Big Ip Application Acceleration Manager	Version 14.0.0
F5 Big Ip Application Security Manager	From 11.5.1 to 11.6.3
F5 Big Ip Application Security Manager	From 12.1.0 to 12.1.3
F5 Big Ip Application Security Manager	From 13.0.0 to 13.1.1
F5 Big Ip Application Security Manager	Version 14.0.0
F5 Big Ip Domain Name System	From 11.5.1 to 11.6.3
F5 Big Ip Domain Name System	From 12.1.0 to 12.1.3
F5 Big Ip Domain Name System	From 13.0.0 to 13.1.1
F5 Big Ip Domain Name System	Version 14.0.0
F5 Big Ip Edge Gateway	From 11.5.1. to 11.6.3
F5 Big Ip Edge Gateway	From 12.1.0 to 12.1.3
F5 Big Ip Edge Gateway	From 13.0.0 to 13.1.1
F5 Big Ip Edge Gateway	Version 14.0.0
F5 Big Ip Fraud Protection Service	From 11.5.1 to 11.6.3
F5 Big Ip Fraud Protection Service	From 12.1.0 to 12.1.3
F5 Big Ip Fraud Protection Service	From 13.0.0 to 13.1.1
F5 Big Ip Fraud Protection Service	Version 14.0.0
F5 Big Ip Global Traffic Manager	From 11.5.1 to 11.6.3
F5 Big Ip Global Traffic Manager	From 12.1.0 to 12.1.3
F5 Big Ip Global Traffic Manager	From 13.0.0 to 13.1.1
F5 Big Ip Global Traffic Manager	Version 14.0.0
F5 Big Ip Link Controller	From 11.5.1 to 11.6.3
F5 Big Ip Link Controller	From 12.1.0 to 12.1.3
F5 Big Ip Link Controller	From 13.0.0 to 13.1.1
F5 Big Ip Link Controller	Version 14.0.0
F5 Big Ip Local Traffic Manager	After 13.0.0 to 13.1.1
F5 Big Ip Local Traffic Manager	From 11.5.1 to 11.6.3
F5 Big Ip Local Traffic Manager	From 12.0.0 to 12.1.3
F5 Big Ip Local Traffic Manager	Version 14.0.0
F5 Big Ip Policy Enforcement Manager	From 11.5.1 to 11.6.3
F5 Big Ip Policy Enforcement Manager	From 12.1.0 to 12.1.3
F5 Big Ip Policy Enforcement Manager	From 13.0.0 to 13.1.1
F5 Big Ip Policy Enforcement Manager	Version 14.0.0
F5 Big Ip Webaccelerator	From 11.5.1 to 11.6.3
F5 Big Ip Webaccelerator	From 12.1.0 to 12.1.3
F5 Big Ip Webaccelerator	From 13.0.0 to 13.1.1
F5 Big Ip Webaccelerator	Version 14.0.0
F5 Traffix Systems Signaling Delivery Controller	From 5.0.0 to 5.1.0
F5 Traffix Systems Signaling Delivery Controller	Version 4.4.0

Configuration G

9 vulnerable

Vulnerable Software	Affected Versions
A10networks Advanced Core Operating System	Version 3.2.2
A10networks Advanced Core Operating System	Version 3.2.2 p5
A10networks Advanced Core Operating System	Version 4.1.0
A10networks Advanced Core Operating System	Version 4.1.0 p11
A10networks Advanced Core Operating System	Version 4.1.1 p8
A10networks Advanced Core Operating System	Version 4.1.2
A10networks Advanced Core Operating System	Version 4.1.2 p4
A10networks Advanced Core Operating System	Version 4.1.4
A10networks Advanced Core Operating System	Version 4.1.4 p1

Configuration H

15 vulnerable

Vulnerable Software	Affected Versions
Cisco Collaboration Meeting Rooms	Version 1.0
Cisco Digital Network Architecture Center	Version 1.2
Cisco Expressway	Version x8.10.1
Cisco Expressway	Version x8.10.2
Cisco Expressway	Version x8.10.3
Cisco Expressway	Version x8.10.4
Cisco Expressway	Version x8.10
Cisco Expressway	Version x8.11
Cisco Expressway Series	All versions
Cisco Meeting Management	Version 1.0.1
Cisco Meeting Management	Version 1.0
Cisco Network Assurance Engine	Version 2.1(1a)
Cisco Threat Grid Cloud	All versions
Cisco Webex Hybrid Data Security	All versions
Cisco Webex Video Mesh	All versions

Configuration I

6 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Telepresence Video Communication Server Firmware	Version x8.10.1
Cisco Telepresence Video Communication Server Firmware	Version x8.10.2
Cisco Telepresence Video Communication Server Firmware	Version x8.10.3
Cisco Telepresence Video Communication Server Firmware	Version x8.10.4
Cisco Telepresence Video Communication Server Firmware	Version x8.10
Cisco Telepresence Video Communication Server Firmware	Version x8.11

Running on/with	Platform Versions
Cisco Telepresence Video Communication Server	All versions

Configuration J

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Telepresence Conductor Firmware	Version xc4.3.1
Cisco Telepresence Conductor Firmware	Version xc4.3.2
Cisco Telepresence Conductor Firmware	Version xc4.3.3
Cisco Telepresence Conductor Firmware	Version xc4.3.4
Cisco Telepresence Conductor Firmware	Version xc4.3

Running on/with	Platform Versions
Cisco Telepresence Conductor	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (84)

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt

Source: cret@cert.org

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181031-02-linux-en

Source: cret@cert.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/28/2

Source: cret@cert.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/07/06/3

Source: cret@cert.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/07/06/4

Source: cret@cert.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/104976

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041424

Source: cret@cert.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1041434

Source: cret@cert.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2018:2384

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2395

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2402

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2403

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2645

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2776

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2785

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2789

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2790

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2791

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2924

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2933

Source: cret@cert.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2948

Source: cret@cert.org

Third Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdf

Source: cret@cert.org

Third Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git/commit/?id=1a4f14bab1868b443f0dd3c55b689a478f82e72e

Source: cret@cert.org

PatchVendor Advisory

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Source: cret@cert.org

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2018/08/msg00014.html

Source: cret@cert.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20180815-0003/

Source: cret@cert.org

Third Party Advisory

https://support.f5.com/csp/article/K95343321

Source: cret@cert.org

Third Party Advisory

https://support.f5.com/csp/article/K95343321?utm_source=f5support&amp%3Butm_medium=RSS

Source: cret@cert.org

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-tcp

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3732-1/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3732-2/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3741-1/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3741-2/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3742-1/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3742-2/

Source: cret@cert.org

Third Party Advisory

https://usn.ubuntu.com/3763-1/

Source: cret@cert.org

Third Party Advisory

https://www.a10networks.com/support/security-advisories/tcp-ip-cve-2018-5390-segmentsmack

Source: cret@cert.org

MitigationThird Party Advisory

https://www.debian.org/security/2018/dsa-4266

Source: cret@cert.org

Third Party Advisory

https://www.kb.cert.org/vuls/id/962459

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

https://www.oracle.com/security-alerts/cpujul2020.html

Source: cret@cert.org

Third Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Source: cret@cert.org

PatchThird Party Advisory

https://www.synology.com/support/security/Synology_SA_18_41

Source: cret@cert.org

Third Party Advisory

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txt