CVE-2018-5391

highPriorität · beachten · 51EPSS 0.324 · 98. PerzentilExploit · PoCDEEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
32.4% (98th) EPSS
CVSS 7.8 · high
Is it mine?
347 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-22

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • Behobenkernel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-abi-whitelists-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-abi-whitelists-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-bootwrapper-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-bootwrapper-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debug-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-ppc64-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-ppc64-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-ppc64le-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-ppc64le-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-s390x-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-doc-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-doc-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-headers-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-headers-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-headers-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-headers-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-headers-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-kdump-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-kdump-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-kdump-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2785
  • Behobenkernel-0:2.6.32-358.93.1.el6.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-0:2.6.32-358.93.1.el6.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debug-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debug-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debug-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debug-devel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debuginfo-common-x86_64-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-debuginfo-common-x86_64-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-devel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-doc-0:2.6.32-358.93.1.el6.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-firmware-0:2.6.32-358.93.1.el6.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenkernel-headers-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenperf-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenperf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenperf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenpython-perf-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenpython-perf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • Behobenpython-perf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect.

    https://access.redhat.com/errata/RHSA-2018:2791
  • BehobenRUGGEDCOM RM1224cisa_csaf_ot

    Update to V6.1

  • BehobenRUGGEDCOM ROX IIcisa_csaf_ot

    Update to V2.13.3

  • BehobenSCALANCE M-800 / S615cisa_csaf_ot

    Update to V6.1

  • BehobenSCALANCE SC-600cisa_csaf_ot

    Update to V2.0 or a later version

  • BehobenSCALANCE W1700 IEEE 802.11accisa_csaf_ot

    Update to V2.0

  • BehobenSCALANCE W700 IEEE 802.11a/b/g/ncisa_csaf_ot

    Update to V6.4

  • BehobenSIMATIC NET CP 1242-7cisa_csaf_ot

    Update to V3.2

  • BehobenSIMATIC NET CP 1243-1 (incl.'SIPLUS variants)cisa_csaf_ot

    Update to V3.2

  • BehobenSIMATIC NET CP 1243-7 LTE EUcisa_csaf_ot

    Update to V3.2

  • BehobenSIMATIC NET CP 1243-7 LTE UScisa_csaf_ot

    Update to V3.2

  • BehobenSIMATIC NET CP 1243-8 IRCcisa_csaf_ot

    Update to V3.2

  • BehobenSIMATIC NET CP 1542SP-1cisa_csaf_ot

    Update to V2.1

  • BehobenSIMATIC NET CP 1542SP-1 IRC (incl.'SIPLUS variants)cisa_csaf_ot

    Update to V2.1

  • BehobenSIMATIC NET CP 1543-1 (incl.'SIPLUS variants)cisa_csaf_ot

    Update to V2.2

  • BehobenSIMATIC NET CP 1543SP-1 (incl.'SIPLUS variants)cisa_csaf_ot

    Update to V2.1

  • BehobenSIMATIC RF185Ccisa_csaf_ot

    Update to V1.3 or later version

  • BehobenSIMATIC RF186Ccisa_csaf_ot

    Update to V1.3 or later version

  • BehobenSIMATIC RF186CIcisa_csaf_ot

    Update to V1.3 or later version

  • BehobenSIMATIC RF188Ccisa_csaf_ot

    Update to V1.3 or later version

  • BehobenSIMATIC RF188CIcisa_csaf_ot

    Update to V1.3 or later version

  • BehobenSINEMA Remote Connect Servercisa_csaf_ot

    Update to V2.1 or later version

  • Workaroundkernel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-abi-whitelists-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-abi-whitelists-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-bootwrapper-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-bootwrapper-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-ppc64-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-ppc64-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-ppc64le-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-ppc64le-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-s390x-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-doc-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-doc-0:3.10.0-514.58.1.el7.noarch as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-kdump-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-kdump-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-kdump-devel-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-tools-libs-devel-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:3.10.0-514.58.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.3)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:2.6.32-358.93.1.el6.src as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:2.6.32-358.93.1.el6.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debug-devel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-debuginfo-common-x86_64-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-devel-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-doc-0:2.6.32-358.93.1.el6.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-firmware-0:2.6.32-358.93.1.el6.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundkernel-headers-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundperf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundpython-perf-debuginfo-0:2.6.32-358.93.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 6.4)redhat_csaf

    One may change the default 4MB and 3MB values of net.ipv4.ipfrag_high_thresh and net.ipv4.ipfrag_low_thresh (and their ipv6 counterparts net.ipv6.ipfrag_high_thresh and net.ipv6.ipfrag_low_thresh) to 256 kB and 192 kB (respectively) or below. Tests show some to significant CPU saturation drop during an attack, depending on a hardware, configuration and environment. There can be some impact on performance though, due to ipfrag_high_thresh of 262144 bytes, as only two 64K fragments can fit in the reassembly queue at the same time. For example, there is a risk of breaking applications that rely on large UDP packets. See the Mitigation section in the https://access.redhat.com/articles/3553061 article for the script to quickly change to/from default and lower settings.

  • Workaroundcisco_csaf

    Any workarounds will be documented in product-specific Cisco bugs, which are identified in the “Vulnerable Products” section of this advisory. In many cases, platform-dependent workarounds may be available. Administrators may be able to leverage access control lists (ACLs), Control Plane Policing (CoPP), or other rate limiting measures to control the flow of fragmented packets that reach an affected interface. Off-device mitigations, such as external firewalls or infrastructure ACLs on edge devices, may also effectively control the flow of IP fragments that are directed to management interfaces or control planes of downstream affected devices.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.8highAV:N/AC:L/Au:N/C:N/I:N/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 6.9
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:Csecondary · CISA US
v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Hsecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USprimärCWE-20USCWE-20USCWE-400USCWE-400USCWE-400US
04

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

05

betroffene Produkte (347)

Betroffene Produkte und Versionsbereiche.

20 von 347 angezeigt
06

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

  • RHSA-2018:2785Red Hat Security Advisory: kernel security and bug fix update2018-09-25csaf · redhat_csafUS

    An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2018:2791Red Hat Security Advisory: kernel security and bug fix update2018-09-25csaf · redhat_csafUS

    An update for kernel is now available for Red Hat Enterprise Linux 6.4 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • WID-SEC-W-2023-0508Linux Kernel: Schwachstelle ermöglicht Denial of ServiceDeutsch2018-08-14csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen.

  • cisco-sa-20180824-linux-ip-fragmentLinux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 20182018-08-24csaf · cisco_csafUS

    On August 14, 2018, the Vulnerability Coordination team of the National Cyber Security Centre of Finland (NCSC-FI) and the CERT Coordination Center (CERT/CC) disclosed a vulnerability in the IP stack that is used by the Linux Kernel. This vulnerability is publicly known as FragmentSmack. The vulnerability could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. An attack could be executed by an attacker who can submit a stream of fragmented IPv4 or IPv6 packets that are designed to trigger the issue on an affected device. The vulnerability is due to inefficient IPv4 and IPv6 fragment reassembly algorithms in the IP stack that is used by the affected kernel. Linux Kernel Versions 3.9 and later are known to be affected by this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment"]

  • ICSA-20-105-05Siemens RUGGEDCOM, SCALANCE, SIMATIC, SINEMA (Update B)2020-04-14icsa · cisa_csaf_otUS

    As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundredhat_csafcisco_csafcisa_csaf_otNVDCVE.orgMITRE
veröffentlicht 2018-09-06geändert 2026-06-17
10

Referenzen (121)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan