CVE-2018-5803

Published: Jun 12, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

Affected (12)

Products: Linux: Linux Kernel · Debian: Debian Linux · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation, Virtualization Host

1 product

1 product

4 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Virtualization Host

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Before 3.2.102
Linux Linux Kernel	From 3.3 to 4.1.51
Linux Linux Kernel	From 4.10 to 4.14.25
Linux Linux Kernel	From 4.15 to 4.15.8
Linux Linux Kernel	From 4.3 to 4.9.87

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0
Redhat Virtualization Host	Version 4.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (52)

https://access.redhat.com/errata/RHSA-2018:1854

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:2948

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3083

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2018:3096

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:0641

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://secuniaresearch.flexerasoftware.com/advisories/81331/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3654-1/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3654-2/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3656-1/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3697-1/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3697-2/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3698-1/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://usn.ubuntu.com/3698-2/

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://www.debian.org/security/2018/dsa-4187

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://www.debian.org/security/2018/dsa-4188

Source: PSIRT-CNA@flexerasoftware.com

Third Party Advisory

https://www.spinics.net/lists/linux-sctp/msg07036.html

Source: PSIRT-CNA@flexerasoftware.com

Mailing ListThird Party Advisory

https://www.spinics.net/lists/netdev/msg482523.html

Source: PSIRT-CNA@flexerasoftware.com

Mailing ListThird Party Advisory

https://access.redhat.com/errata/RHSA-2018:1854