UBUNTU-CVE-2018-10938

Details

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.

Affected Packages(143 packages)

linux

Ubuntu 22.04 LTS

Fixed in:

5.13.0-19.19

linux

Ubuntu 14.04 LTS

Fixed in:

3.11.0-12.19

linux

Ubuntu 18.04 LTS

Fixed in:

4.13.0-16.19

linux

Ubuntu 24.04 LTS

Fixed in:

6.5.0-9.9

linux

Ubuntu 16.04 LTS

Affected versions:

4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.114.3.0-5.164.3.0-6.174.3.0-7.184.4.0-10.254.4.0-101.124+72 more

Fixed in:

4.4.0-138.164

linux

Ubuntu 24.10

Fixed in:

6.8.0-31.31

linux

Ubuntu 20.04 LTS

Affected versions:

5.3.0-18.195.3.0-24.26

Fixed in:

5.4.0-9.12

linux-aws

Ubuntu 22.04 LTS

Fixed in:

5.13.0-1005.6

linux-aws

Ubuntu 14.04 LTS

Affected versions:

4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.94.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.16+10 more

Fixed in:

4.4.0-1032.35

linux-aws

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1001.1

References

REPORThttp://seclists.org/oss-sec/2018/q3/179 REPORThttp://www.openwall.com/lists/oss-security/2018/08/27/1 REPORThttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=40413955ee265a5e42f710940ec78f5450d49149 REPORThttps://marc.info/?t=153719718600001&r=1&w=2 REPORThttps://marc.info/?t=153720664100001&r=1&w=2 REPORThttps://ubuntu.com/security/CVE-2018-10938 REPORThttps://ubuntu.com/security/notices/USN-3797-1 REPORThttps://ubuntu.com/security/notices/USN-3797-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2018-10938

UBUNTU-CVE-2018-10938

Details

Affected Packages(143 packages)

References

CVSS Analysis

Related

Ecosystems(27)

Timeline