Wind River Support Network

HomeDefectsLIN8-8887
Fixed

LIN8-8887 : Security Advisory - linux - CVE-2018-1066

Created: Mar 15, 2018    Updated: Dec 3, 2018
Resolved Date: Apr 25, 2018
Found In Version: 8.0.0.25
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Kernel

Description

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.

https://nvd.nist.gov/vuln/detail/CVE-2018-1066

Other Downloads


CVEs


Live chat
Online