CVE:CVE-2018-5391
CNNVD:CNNVD-201808-570
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 3.9+版本中存在输入验证错误漏洞。远程攻击者可通过发送特制的IP碎片利用该漏洞造成拒绝服务。
solution:Upgrade linux linux_kernel to a higher version than 4.18,and avoid the version [3.9,4.18]; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 6.4,6.5,6.6,7.2,7.3,7.4,and avoid the version 6.4,6.5,6.6,7.2,7.3,7.4; Upgrade redhat enterprise_linux_server_eus to a higher version than 6.7,7.3,7.4,7.5,and avoid the version 6.7,7.3,7.4,7.5; Upgrade redhat enterprise_linux_server_tus to a higher version than 6.6,7.2,7.3,7.4,and avoid the version 6.6,7.2,7.3,7.4; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,18.04,and avoid the version 12.04,14.04,16.04,18.04; Upgrade microsoft windows_10 to a higher version than -,1607,1703,1709,1803,and avoid the version 1607,1703,1709,1803; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8.1 to a higher version than -; Upgrade microsoft windows_rt_8.1 to a higher version than -; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -,1709,1803,and avoid the version 1709,1803; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_analytics to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_domain_name_system to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_edge_gateway to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_fraud_protection_service to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_link_controller to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade f5 big-ip_webaccelerator to a higher version than 11.6.5.1,12.1.5,13.1.3,14.0.1.1,14.1.2.4,and avoid the version [11.5.1,11.6.5.1),[12.1.0,12.1.5),[13.0.0,13.1.3),[14.0.0,14.0.1.1),[14.1.0,14.1.2.4); Upgrade siemens ruggedcom_rm1224_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens ruggedcom_rox_ii_firmware to a higher version than 2.13.3,and avoid the version (,2.13.3); Upgrade siemens scalance_m-800_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens scalance_s615_firmware to a higher version than 6.1,and avoid the version (,6.1); Upgrade siemens scalance_sc-600_firmware to a higher version than 2.0,and avoid the version (,2.0); Upgrade siemens scalance_w1700_ieee_802.11ac_firmware to a higher version than 2.0,and avoid the version (,2.0); Upgrade siemens scalance_w700_ieee_802.11a/b/g/n_firmware to a higher version than 6.4,and avoid the version (,6.4); Upgrade siemens simatic_net_cp_1242-7_firmware to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens simatic_net_cp_1243-1_firmware to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens simatic_net_cp_1243-7_lte_eu_firmware to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens simatic_net_cp_1243-7_lte_us_firmware to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens simatic_net_cp_1243-8_irc_firmware to a higher version than 3.2,and avoid the version (,3.2); Upgrade siemens simatic_net_cp_1542sp-1_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_net_cp_1542sp-1_irc_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_net_cp_1543-1_firmware to a higher version than 2.2,and avoid the version (,2.2); Upgrade siemens simatic_net_cp_1543sp-1_firmware to a higher version than 2.1,and avoid the version (,2.1); Upgrade siemens simatic_rf185c_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens simatic_rf186c_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens simatic_rf186ci_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens simatic_rf188_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens simatic_rf188ci_firmware to a higher version than 1.3,and avoid the version (,1.3); Upgrade siemens sinema_remote_connect_server_firmware to a higher version than 2.0.1,and avoid the version [1.1,2.0.1)