PT-2018-12635 · Linux · Linux Kernel

Vladis Dronov · Published 2018-09-18 · Updated 2019-10-09 · CVE-2018-14641

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions 4.19-rc1 through 4.19-rc3

Description A security flaw was found in the ip frag reasm() function, which can cause a later system crash in ip do fragment(). With certain non-default configuration of a victim host, an attacker can trigger this crash remotely, leading to a remote denial-of-service.

Recommendations For Linux kernel versions 4.19-rc1 through 4.19-rc3, consider disabling the ip frag reasm() function as a temporary workaround until a patch is available. Restrict access to the affected ip do fragment() function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

CWE-456

Related Identifiers

CVE-2018-14641

MGASA-2018-0391

MGASA-2018-0418

MGASA-2018-0419

RHSA-2018:2948

Affected Products

Linux Kernel

References · 28

• 🔥 https://seclists.org/oss-sec/2018/q3/248 · Exploit
• https://osv.dev/vulnerability/MGASA-2018-0419 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d407b071dc369c26a38398326ee2be53651cfe4 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14641 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0418 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14641 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-14641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-14641 · Security Note
• https://osv.dev/vulnerability/MGASA-2018-0391 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0418.html · Security Note
• https://advisories.mageia.org/MGASA-2018-0391.html · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14641 · Patch
• https://access.redhat.com/errata/RHSA-2018:2948 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14641 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0419.html · Security Note