CVE Vulnerabilities

CVE-2018-10938

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Aug 27, 2018 | Modified: Oct 03, 2019
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A certain non-default configuration of LSM (Linux Security Module) and NetLabel should be set up on a system before an attacker could leverage this flaw.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Linux_kernel Linux 4.0 (including) 4.0 (including)
Linux_kernel Linux 4.0-rc1 (including) 4.0-rc1 (including)
Linux_kernel Linux 4.0-rc2 (including) 4.0-rc2 (including)
Linux_kernel Linux 4.0-rc3 (including) 4.0-rc3 (including)
Linux_kernel Linux 4.0-rc4 (including) 4.0-rc4 (including)
Linux_kernel Linux 4.0-rc5 (including) 4.0-rc5 (including)
Linux_kernel Linux 4.0-rc6 (including) 4.0-rc6 (including)
Linux_kernel Linux 4.0-rc7 (including) 4.0-rc7 (including)
Linux_kernel Linux 4.1 (including) 4.1 (including)
Linux_kernel Linux 4.1-rc1 (including) 4.1-rc1 (including)
Linux_kernel Linux 4.1-rc2 (including) 4.1-rc2 (including)
Linux_kernel Linux 4.1-rc3 (including) 4.1-rc3 (including)
Linux_kernel Linux 4.1-rc4 (including) 4.1-rc4 (including)
Linux_kernel Linux 4.1-rc5 (including) 4.1-rc5 (including)
Linux_kernel Linux 4.1-rc6 (including) 4.1-rc6 (including)
Linux_kernel Linux 4.1-rc7 (including) 4.1-rc7 (including)
Linux_kernel Linux 4.1-rc8 (including) 4.1-rc8 (including)
Linux_kernel Linux 4.2 (including) 4.2 (including)
Linux_kernel Linux 4.2-rc1 (including) 4.2-rc1 (including)
Linux_kernel Linux 4.2-rc2 (including) 4.2-rc2 (including)
Linux_kernel Linux 4.2-rc3 (including) 4.2-rc3 (including)
Linux_kernel Linux 4.2-rc4 (including) 4.2-rc4 (including)
Linux_kernel Linux 4.2-rc5 (including) 4.2-rc5 (including)
Linux_kernel Linux 4.2-rc6 (including) 4.2-rc6 (including)
Linux_kernel Linux 4.2-rc7 (including) 4.2-rc7 (including)
Linux_kernel Linux 4.2-rc8 (including) 4.2-rc8 (including)
Linux_kernel Linux 4.3 (including) 4.3 (including)
Linux_kernel Linux 4.3-rc1 (including) 4.3-rc1 (including)
Linux_kernel Linux 4.3-rc2 (including) 4.3-rc2 (including)
Linux_kernel Linux 4.3-rc3 (including) 4.3-rc3 (including)
Linux_kernel Linux 4.3-rc4 (including) 4.3-rc4 (including)
Linux_kernel Linux 4.3-rc5 (including) 4.3-rc5 (including)
Linux_kernel Linux 4.3-rc6 (including) 4.3-rc6 (including)
Linux_kernel Linux 4.3-rc7 (including) 4.3-rc7 (including)
Linux_kernel Linux 4.4 (including) 4.4 (including)
Linux_kernel Linux 4.4-rc1 (including) 4.4-rc1 (including)
Linux_kernel Linux 4.4-rc2 (including) 4.4-rc2 (including)
Linux_kernel Linux 4.4-rc3 (including) 4.4-rc3 (including)
Linux_kernel Linux 4.4-rc4 (including) 4.4-rc4 (including)
Linux_kernel Linux 4.4-rc5 (including) 4.4-rc5 (including)
Linux_kernel Linux 4.4-rc6 (including) 4.4-rc6 (including)
Linux_kernel Linux 4.4-rc7 (including) 4.4-rc7 (including)
Linux_kernel Linux 4.4-rc8 (including) 4.4-rc8 (including)
Linux_kernel Linux 4.5 (including) 4.5 (including)
Linux_kernel Linux 4.5-rc1 (including) 4.5-rc1 (including)
Linux_kernel Linux 4.5-rc2 (including) 4.5-rc2 (including)
Linux_kernel Linux 4.5-rc3 (including) 4.5-rc3 (including)
Linux_kernel Linux 4.5-rc4 (including) 4.5-rc4 (including)
Linux_kernel Linux 4.5-rc5 (including) 4.5-rc5 (including)
Linux_kernel Linux 4.5-rc6 (including) 4.5-rc6 (including)
Linux_kernel Linux 4.5-rc7 (including) 4.5-rc7 (including)
Linux_kernel Linux 4.6 (including) 4.6 (including)
Linux_kernel Linux 4.6-rc1 (including) 4.6-rc1 (including)
Linux_kernel Linux 4.6-rc2 (including) 4.6-rc2 (including)
Linux_kernel Linux 4.6-rc3 (including) 4.6-rc3 (including)
Linux_kernel Linux 4.6-rc4 (including) 4.6-rc4 (including)
Linux_kernel Linux 4.6-rc5 (including) 4.6-rc5 (including)
Linux_kernel Linux 4.6-rc6 (including) 4.6-rc6 (including)
Linux_kernel Linux 4.6-rc7 (including) 4.6-rc7 (including)
Linux_kernel Linux 4.7 (including) 4.7 (including)
Linux_kernel Linux 4.7-rc1 (including) 4.7-rc1 (including)
Linux_kernel Linux 4.7-rc2 (including) 4.7-rc2 (including)
Linux_kernel Linux 4.7-rc3 (including) 4.7-rc3 (including)
Linux_kernel Linux 4.7-rc4 (including) 4.7-rc4 (including)
Linux_kernel Linux 4.7-rc5 (including) 4.7-rc5 (including)
Linux_kernel Linux 4.7-rc6 (including) 4.7-rc6 (including)
Linux_kernel Linux 4.7-rc7 (including) 4.7-rc7 (including)
Linux_kernel Linux 4.8 (including) 4.8 (including)
Linux_kernel Linux 4.8-rc1 (including) 4.8-rc1 (including)
Linux_kernel Linux 4.8-rc2 (including) 4.8-rc2 (including)
Linux_kernel Linux 4.8-rc3 (including) 4.8-rc3 (including)
Linux_kernel Linux 4.8-rc4 (including) 4.8-rc4 (including)
Linux_kernel Linux 4.8-rc5 (including) 4.8-rc5 (including)
Linux_kernel Linux 4.8-rc6 (including) 4.8-rc6 (including)
Linux_kernel Linux 4.8-rc7 (including) 4.8-rc7 (including)
Linux_kernel Linux 4.8-rc8 (including) 4.8-rc8 (including)
Linux_kernel Linux 4.9 (including) 4.9 (including)
Linux_kernel Linux 4.9-rc1 (including) 4.9-rc1 (including)
Linux_kernel Linux 4.9-rc2 (including) 4.9-rc2 (including)
Linux_kernel Linux 4.9-rc3 (including) 4.9-rc3 (including)
Linux_kernel Linux 4.9-rc4 (including) 4.9-rc4 (including)
Linux_kernel Linux 4.9-rc5 (including) 4.9-rc5 (including)
Linux_kernel Linux 4.9-rc6 (including) 4.9-rc6 (including)
Linux_kernel Linux 4.9-rc7 (including) 4.9-rc7 (including)
Linux_kernel Linux 4.9-rc8 (including) 4.9-rc8 (including)
Linux_kernel Linux 4.10 (including) 4.10 (including)
Linux_kernel Linux 4.10-rc1 (including) 4.10-rc1 (including)
Linux_kernel Linux 4.10-rc2 (including) 4.10-rc2 (including)
Linux_kernel Linux 4.10-rc3 (including) 4.10-rc3 (including)
Linux_kernel Linux 4.10-rc4 (including) 4.10-rc4 (including)
Linux_kernel Linux 4.10-rc5 (including) 4.10-rc5 (including)
Linux_kernel Linux 4.10-rc6 (including) 4.10-rc6 (including)
Linux_kernel Linux 4.10-rc7 (including) 4.10-rc7 (including)
Linux_kernel Linux 4.10-rc8 (including) 4.10-rc8 (including)
Linux_kernel Linux 4.11 (including) 4.11 (including)
Linux_kernel Linux 4.11-rc1 (including) 4.11-rc1 (including)
Linux_kernel Linux 4.11-rc2 (including) 4.11-rc2 (including)
Linux_kernel Linux 4.11-rc3 (including) 4.11-rc3 (including)
Linux_kernel Linux 4.11-rc4 (including) 4.11-rc4 (including)
Linux_kernel Linux 4.11-rc5 (including) 4.11-rc5 (including)
Linux_kernel Linux 4.11-rc6 (including) 4.11-rc6 (including)
Linux_kernel Linux 4.11-rc7 (including) 4.11-rc7 (including)
Linux_kernel Linux 4.11-rc8 (including) 4.11-rc8 (including)
Linux_kernel Linux 4.12 (including) 4.12 (including)
Linux_kernel Linux 4.12-rc1 (including) 4.12-rc1 (including)
Linux_kernel Linux 4.12-rc2 (including) 4.12-rc2 (including)
Linux_kernel Linux 4.12-rc3 (including) 4.12-rc3 (including)
Linux_kernel Linux 4.12-rc4 (including) 4.12-rc4 (including)
Linux_kernel Linux 4.12-rc5 (including) 4.12-rc5 (including)
Linux_kernel Linux 4.12-rc6 (including) 4.12-rc6 (including)
Linux_kernel Linux 4.12-rc7 (including) 4.12-rc7 (including)
Linux_kernel Linux 4.13-rc1 (including) 4.13-rc1 (including)
Linux_kernel Linux 4.13-rc2 (including) 4.13-rc2 (including)
Linux_kernel Linux 4.13-rc3 (including) 4.13-rc3 (including)
Linux_kernel Linux 4.13-rc4 (including) 4.13-rc4 (including)

References