Memory corruption in Linux kernel - CVE-2018-5803

Vulnerability identifier: #VU10812

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-5803

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to cause DoS condition on the target system.

The weakness exists in the _sctp_make_chunk() function due to boundary error. A local attacker can submit a crafted SCTP packet, trigger memory corruption and cause the service to crash.

Linux kernel
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power 9
Red Hat Enterprise Linux for IBM System z (Structure A)
Ubuntu
Fedora

kernel-rt (Red Hat package)
openSUSE Leap
linux (Ubuntu package)
linux-oem (Ubuntu package)
kernel-alt (Red Hat package)
kernel
MRG Realtime

Install update from vendor's website.

kernel-rt (Red Hat package) - update to 3.10.0-693.46.1.rt56.639.el6rt
linux (Ubuntu package) - addressed in versions 3.13.0-153.203, 4.13.0-46.51
linux-oem (Ubuntu package) - update to 4.13.0-1031.35
kernel-alt (Red Hat package) - update to 4.14.0-115.el7a
kernel - update to 4.15.8-300.fc27

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=07f2c7ab6f8d0a7e7c5764c...

• Denial of service in Linux Kernel
• Amazon Linux AMI update for kernel
• Debian update for linux
• Debian update for linux
• OpenSUSE Linux update for the Linux Kernel
• Red Hat update for kernel-rt
• Fedora 27 update for kernel
• Red Hat Enterprise Linux 7 update for kernel-alt
• Ubuntu update for linux
• Ubuntu update for linux, linux-raspi2
• Ubuntu update for linux-oem