CVE-2018-5391

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

32.44% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 98.1% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2018-09-06 21:00Z8 YR AGO

Last updated

2024-08-05 05:33Z2 YR AGO

Reserved

2018-01-12

Assigning CNA

certcc

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-400Uncontrolled Resource ConsumptionClass
• CWE-20Improper Input ValidationClass

Data version

5.1

Document digest

05d9062c161fd1d2222a3379d3b6519ca2d3da88d2b4eb79fa313ecfe9d2650d

• access.redhat.comRHSA-2018:3540https://access.redhat.com/errata/RHSA-2018:3540vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:2785https://access.redhat.com/errata/RHSA-2018:2785vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:3083https://access.redhat.com/errata/RHSA-2018:3083vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:2925https://access.redhat.com/errata/RHSA-2018:2925vendor-advisoryx_refsource_REDHAT
• www.kb.cert.orgVU#641765https://www.kb.cert.org/vuls/id/641765third-party-advisoryx_refsource_CERT-VN
• www.arubanetworks.comhttp://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-004.txtx_refsource_CONFIRM
• usn.ubuntu.comUSN-3741-2https://usn.ubuntu.com/3741-2/vendor-advisoryx_refsource_UBUNTU
• www.securitytracker.com1041476http://www.securitytracker.com/id/1041476vdb-entryx_refsource_SECTRACK
• access.redhat.comRHSA-2018:3459https://access.redhat.com/errata/RHSA-2018:3459vendor-advisoryx_refsource_REDHAT
• git.kernel.orghttps://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next.git/commit/?id=c30f1fc041b74ecdb072dd44f858750414b8b19fx_refsource_MISC
• access.redhat.comRHSA-2018:2933https://access.redhat.com/errata/RHSA-2018:2933vendor-advisoryx_refsource_REDHAT
• usn.ubuntu.comUSN-3740-2https://usn.ubuntu.com/3740-2/vendor-advisoryx_refsource_UBUNTU
• usn.ubuntu.comUSN-3741-1https://usn.ubuntu.com/3741-1/vendor-advisoryx_refsource_UBUNTU
• access.redhat.comRHSA-2018:3590https://access.redhat.com/errata/RHSA-2018:3590vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:2948https://access.redhat.com/errata/RHSA-2018:2948vendor-advisoryx_refsource_REDHAT
• usn.ubuntu.comUSN-3742-2https://usn.ubuntu.com/3742-2/vendor-advisoryx_refsource_UBUNTU
• usn.ubuntu.comUSN-3740-1https://usn.ubuntu.com/3740-1/vendor-advisoryx_refsource_UBUNTU
• www.securityfocus.com105108http://www.securityfocus.com/bid/105108vdb-entryx_refsource_BID
• lists.debian.org[debian-lts-announce] 20180815 [SECURITY] [DLA 1466-1] linux-4.9 security updatehttps://lists.debian.org/debian-lts-announce/2018/08/msg00014.htmlmailing-listx_refsource_MLIST
• usn.ubuntu.comUSN-3742-1https://usn.ubuntu.com/3742-1/vendor-advisoryx_refsource_UBUNTU
• access.redhat.comRHSA-2018:2924https://access.redhat.com/errata/RHSA-2018:2924vendor-advisoryx_refsource_REDHAT
• www.debian.orgDSA-4272https://www.debian.org/security/2018/dsa-4272vendor-advisoryx_refsource_DEBIAN
• access.redhat.comRHSA-2018:3586https://access.redhat.com/errata/RHSA-2018:3586vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:2846https://access.redhat.com/errata/RHSA-2018:2846vendor-advisoryx_refsource_REDHAT
• www.securitytracker.com1041637http://www.securitytracker.com/id/1041637vdb-entryx_refsource_SECTRACK
• access.redhat.comRHSA-2018:3096https://access.redhat.com/errata/RHSA-2018:3096vendor-advisoryx_refsource_REDHAT
• access.redhat.comRHSA-2018:2791https://access.redhat.com/errata/RHSA-2018:2791vendor-advisoryx_refsource_REDHAT
• lists.debian.org[debian-lts-announce] 20190315 [SECURITY] [DLA 1715-1] linux-4.9 security updatehttps://lists.debian.org/debian-lts-announce/2019/03/msg00017.htmlmailing-listx_refsource_MLIST
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20181003-0002/x_refsource_CONFIRM
• www.openwall.com[oss-security] 20190628 Re: linux-distros membership application - Microsofthttp://www.openwall.com/lists/oss-security/2019/06/28/2mailing-listx_refsource_MLIST
• www.openwall.com[oss-security] 20190706 Re: linux-distros membership application - Microsofthttp://www.openwall.com/lists/oss-security/2019/07/06/3mailing-listx_refsource_MLIST
• www.openwall.com[oss-security] 20190706 Re: linux-distros membership application - Microsofthttp://www.openwall.com/lists/oss-security/2019/07/06/4mailing-listx_refsource_MLIST
• support.f5.comhttps://support.f5.com/csp/article/K74374841?utm_source=f5support&amp%3Butm_medium=RSSx_refsource_CONFIRM
• www.huawei.comhttp://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-linux-enx_refsource_CONFIRM
• cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/pdf/ssa-377115.pdfx_refsource_CONFIRM