Published: 02/03/2018 Updated: 23/04/2019

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 14.04
canonical ubuntu linux 12.04

Several security issues were fixed in the Linux kernel ...

Missing length check of payload in net/sctp/sm_make_chunkc:_sctp_make_chunk() function allows denial of service:An error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunkc) when handling SCTP, packet length can be exploited by a malicious local user to cause a kernel crash and a DoS (CVE-2018-5803) Mishandling mutex within libsas allo ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2015-9016 Ming Lei reported a race condition in the multiqueue block layer (blk-mq) On a system with a driver using blk-mq (mtip32xx, null_blk, or virtio_blk), a local user might be able ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks CVE-2017-5715 Multiple researchers have discovered a vulnerability in various processors supporting speculative execution, enabling an attacker controlling an unprivileged process to read mem ...

A flaw was found in the Linux kernel's client-side implementation of the cifs protocol This flaw allows an attacker controlling the server to kernel panic a client which has the CIFS server mounted ...

CWE-476 https://patchwork.kernel.org/patch/10187633/https://github.com/torvalds/linux/commit/cabfb3680f78981d26c078a26e5c748531257ebb https://bugzilla.redhat.com/show_bug.cgi?id=1539599 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cabfb3680f78981d26c078a26e5c748531257ebb https://www.debian.org/security/2018/dsa-4188 https://www.debian.org/security/2018/dsa-4187 https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://usn.ubuntu.com/3880-2/https://usn.ubuntu.com/3880-1/http://www.securityfocus.com/bid/103378 https://nvd.nist.gov https://usn.ubuntu.com/3880-1/

CVE-2018-1066

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect