We use cookies to help us improve our webpage. Please read our Cookie Policy.

Synology-SA-18:44 Linux kernel

Publish Time: 2018-08-15 13:17:16 UTC+8

Last Updated: 2018-08-15 13:17:16 UTC+8

Severity
Important
Status
Ongoing

Abstract

CVE-2018-5391, a.k.a. FragmentSmack attack, allows remote attackers to conduct denial-of-service attacks via a susceptible version of Synology Diskstation Manager (DSM), SkyNAS or VS960HD.

SRM 1.1 is not affected as CVE-2018-5391 only affects Linux kernel 3.9 or above.

Affected Products

Product Severity Fixed Release Availability
DSM 6.2 Important Ongoing
DSM 6.1 Important Will be fixed in DSM 6.2.
DSM 5.2 Important Will be fixed in DSM 6.2.
SkyNAS Important Ongoing
VS960HD Important Ongoing
SRM 1.1 Not affected N/A

Mitigation

If you need immediate assistance, please contact Synology technical support via https://account.synology.com/en-global/support.

Detail

Reserved

Reference

Revision

Revision Date Description
1 2018-08-15 Initial public release.