CVE-2018-5803

MEDIUM

Linux Kernel < 4.15.8 DoS via SCTP Packet Length Handling

Title source: llm

Description

In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.

References (26)

Core 26

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

https://secuniaresearch.flexerasoftware.com/advisories/81331/

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:3083

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2018/dsa-4187

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3654-1/

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:1854

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3697-1/

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102

Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2018/dsa-4188

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://www.spinics.net/lists/netdev/msg482523.html

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:2948

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3697-2/

Vendor Advisory x_refsource_confirm

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

https://www.spinics.net/lists/linux-sctp/msg07036.html

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3654-2/

Vendor Advisory x_refsource_confirm

https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3698-1/

Third Party Advisory mailing-list x_refsource_mlist

https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3656-1/

Third Party Advisory x_refsource_misc

https://secuniaresearch.flexerasoftware.com/secunia_research/2018-2/

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2018:3096

Third Party Advisory vendor-advisory x_refsource_ubuntu

https://usn.ubuntu.com/3698-2/

Third Party Advisory vendor-advisory x_refsource_redhat

https://access.redhat.com/errata/RHSA-2019:0641

Scores

CVSS v3 5.5

EPSS 0.0055

EPSS Percentile 42.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (8)

debian/debian_linux 7.0

debian/debian_linux 8.0

debian/debian_linux 9.0

linux/linux_kernel < 3.2.102

redhat/enterprise_linux_desktop 7.0

redhat/enterprise_linux_server 7.0

redhat/enterprise_linux_workstation 7.0

redhat/virtualization_host 4.0

Published Jun 12, 2018

Tracked Since Feb 18, 2026