← back
CVE-2018-5803

CVE-2018-5803

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
exploitation probability
0.8%top 44% of all CVEs
observed exploitation
nono source reports it
In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SCTP packets length can be exploited to cause a kernel crash.
Affected products
Linux Foundation · Linux Kernel
References
https://access.redhat.com/errata/RHSA-2018:1854https://access.redhat.com/errata/RHSA-2018:2948https://access.redhat.com/errata/RHSA-2018:3083https://access.redhat.com/errata/RHSA-2018:3096https://access.redhat.com/errata/RHSA-2019:0641https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.102https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.25https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.51https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.15.8https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.121https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.87https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/commit/?id=07f2c7ab6f8d0a7e7c5764c4e6cc9c52951b9d9c