CVE-2018-5703 The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other...
CriticalCVSS 9.8
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.14.11 allows attackers to cause a denial of service (slab out-of-bounds write) or possibly have unspecified other impact via vectors involving TLS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.15.11-1 | 4.15.11-1 |
| debian/linux(Debian:13) | < 4.15.11-1 | 4.15.11-1 |
| debian/linux(Debian:14) | < 4.15.11-1 | 4.15.11-1 |
| Linux kernel | >= 4.13, < 4.14.86 | 4.14.86 |
| Linux kernel | >= 4.15, < 4.15.8 | 4.15.8 |
References
- Debian Security Tracker CVE-2018-5703 vendor-advisory
- groups.google.com issue-tracking mailing-list third-party-advisory