CVE-2018-1000026

moderate-risk
Published 2018-02-09

Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..

Do I need to act?

-
0.86% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.7/10 High
NETWORK / LOW complexity

Affected Products (10)

Affected Vendors

Debian Redhat Linux Canonical

References (30)

Third Party Advisory http://lists.openwall.net/netdev/2018/01/16/40
Third Party Advisory http://lists.openwall.net/netdev/2018/01/18/96
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3096
Mailing List https://lists.debian.org/debian-lts-announce/2019/05/msg00002.html
Third Party Advisory https://patchwork.ozlabs.org/patch/859410/
Third Party Advisory https://usn.ubuntu.com/3617-1/
Third Party Advisory https://usn.ubuntu.com/3617-2/
Third Party Advisory https://usn.ubuntu.com/3617-3/
Third Party Advisory https://usn.ubuntu.com/3619-1/
Third Party Advisory https://usn.ubuntu.com/3619-2/
Third Party Advisory https://usn.ubuntu.com/3620-1/
Third Party Advisory https://usn.ubuntu.com/3620-2/
Third Party Advisory https://usn.ubuntu.com/3632-1/
Third Party Advisory http://lists.openwall.net/netdev/2018/01/16/40
Third Party Advisory http://lists.openwall.net/netdev/2018/01/18/96
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:2948
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3083
Third Party Advisory https://access.redhat.com/errata/RHSA-2018:3096
and 10 more references
46
/ 100
moderate-risk
Severity 27/34 · High
Exploitability 3/34 · Minimal
Exposure 16/34 · Moderate