CVE-2018-5391
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
HIGH
7.5
CVSS Score
Published: September 6, 2018 at 09:00 PM UTC
Updated: June 17, 2026 at 02:00 AM UTC
73 products affected across 7 vendorsLinux KernelDebian LinuxWindows Server 2016
Using Kernel by Linux?
Get instant alerts when new vulnerabilities affect Kernel - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 32%
Description
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Ubuntu Linux· Canonicalrubygems
95%Debian Linux· Debiandrupal
95%11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
11.5.1 ≤ v < 11.6.5.112.1.0 ≤ v < 12.1.513.0.0 ≤ v < 13.1.314.0.0 ≤ v < 14.0.1.114.1.0 ≤ v < 14.1.2.4
Affected range stops below 11.6.5.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 12.1.5, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.0.1.1, so it looks safe — our inference, not a vendor statement
Affected range stops below 14.1.2.4, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (35)
x_refsource_CONFIRMThird Party Advisory
Source: [email protected]
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txtx_refsource_CONFIRMBroken Link
Source: [email protected]
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-enMailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2019/06/28/2Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2019/07/06/3Mailing Listx_refsource_MLISTThird Party Advisory
Source: [email protected]
http://www.openwall.com/lists/oss-security/2019/07/06/4VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/105108VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1041476VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1041637CVSS
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-400CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card