CVE-2018-5390CWE-400

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service

published August 6, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS

—

EPSS

72%

Percentile

99.4

In the wild

Unconfirmed

What it is

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.71767 · 99.4th percentile
Weakness: CWE-400 · Uncontrolled Resource Consumption
Published: 2018-08-06T20:00Z

EPSS history

Timeline

06 AUG 20:00Z
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service
cvelistv5