{"cvss":0.0,"datePublished":"2020-02-25T00:00:00Z","dateUpdated":"2020-02-25T00:00:00Z","description":"The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.","dueDate":"","id":"CVE-2018-5391","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Kernel","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"CRITICAL","source":"vulncheck_kev","title":"Linux Kernel Uncontrolled Resource Consumption","vendor":"Linux"}