SUSE-SU-2018:3787-1
SUSE-SU-2018:3787-1 · Security update for the Linux Kernel (Live Patch 15 for SLE 12 SP2)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.4.90-92_50 fixes several issues. The following security issues were fixed: - CVE-2018-5391: Fixed a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may have caused a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098). - CVE-2018-18386: The drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bsc#1112039).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp2_update_16 SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 11-2.1
Update to 11-2.1
kgraft-patch-sle12-sp2_update_17 SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 11-2.1
Update to 11-2.1
kgraft-patch-sle12-sp2_update_15 SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 12-2.1
Update to 12-2.1
kgraft-patch-sle12-sp2_update_16 SUSE:Linux Enterprise Server 12 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 11-2.1
Update to 11-2.1
kgraft-patch-sle12-sp2_update_17 SUSE:Linux Enterprise Server 12 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 11-2.1
Update to 11-2.1
kgraft-patch-sle12-sp2_update_15 SUSE:Linux Enterprise Server 12 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 12-2.1
Update to 12-2.1