CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10938

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.06

EPSS Ranking 90.2%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 7.1

References

Products affected by CVE-2018-10938

Canonical » Ubuntu Linux » Version: 14.04

cpe:2.3:o:canonical:ubuntu_linux:14.04
Canonical » Ubuntu Linux » Version: 16.04

cpe:2.3:o:canonical:ubuntu_linux:16.04
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Linux » Linux Kernel » Version: 4.0

cpe:2.3:o:linux:linux_kernel:4.0
Linux » Linux Kernel » Version: 4.1

cpe:2.3:o:linux:linux_kernel:4.1
Linux » Linux Kernel » Version: 4.10

cpe:2.3:o:linux:linux_kernel:4.10
Linux » Linux Kernel » Version: 4.11

cpe:2.3:o:linux:linux_kernel:4.11
Linux » Linux Kernel » Version: 4.12

cpe:2.3:o:linux:linux_kernel:4.12
Linux » Linux Kernel » Version: 4.13

cpe:2.3:o:linux:linux_kernel:4.13
Linux » Linux Kernel » Version: 4.2

cpe:2.3:o:linux:linux_kernel:4.2
Linux » Linux Kernel » Version: 4.3

cpe:2.3:o:linux:linux_kernel:4.3
Linux » Linux Kernel » Version: 4.4

cpe:2.3:o:linux:linux_kernel:4.4
Linux » Linux Kernel » Version: 4.5

cpe:2.3:o:linux:linux_kernel:4.5
Linux » Linux Kernel » Version: 4.6

cpe:2.3:o:linux:linux_kernel:4.6
Linux » Linux Kernel » Version: 4.7

cpe:2.3:o:linux:linux_kernel:4.7
Linux » Linux Kernel » Version: 4.8

cpe:2.3:o:linux:linux_kernel:4.8
Linux » Linux Kernel » Version: 4.9

cpe:2.3:o:linux:linux_kernel:4.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-10938

Products

Pricing

Contact Us