CVE-2018-5803
CVE-2018-5803
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
12 jun 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.
Productos afectados
Linux Foundation · Linux Kernel¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://access.redhat.com/errata/RHSA-2018:1854https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2018:3083https://access.redhat.com/errata/RHSA-2018:3096https://access.redhat.com/errata/RHSA-2019:0641https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c