CVE-2018-1000026

HIGH

Linux Kernel 2.6.12-4.4.181 - Denial of Service via bnx2x Network Card Driver

Title source: llm
STIX 2.1

Description

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

References (15)

Core 15
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3617-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3619-2/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3617-3/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3632-1/
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3620-2/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory x_refsource_misc
https://patchwork.ozlabs.org/patch/859410/
Third Party Advisory mailing-list x_refsource_mlist
http://lists.openwall.net/netdev/2018/01/16/40
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3617-2/
Third Party Advisory mailing-list x_refsource_mlist
http://lists.openwall.net/netdev/2018/01/18/96
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3620-1/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:3096
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3619-1/
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html

Scores

CVSS v3 7.7
EPSS 0.0390
EPSS Percentile 89.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (10)
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 17.10
debian/debian_linux 8.0
linux/linux_kernel 2.6.12 - 4.4.181
redhat/enterprise_linux 7.0
redhat/enterprise_linux_desktop 7.0
redhat/enterprise_linux_server 7.0
redhat/enterprise_linux_workstation 7.0
Published Feb 09, 2018
Tracked Since Feb 18, 2026