Wind River Support Network

HomeDefectsLIN9-6562
Fixed

LIN9-6562 : Security Advisory - linux - CVE-2018-1066

Created: Mar 15, 2018    Updated: Dec 3, 2018
Resolved Date: Apr 10, 2018
Found In Version: 9.0.0.14
Fix Version: 9.0.0.16
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Kernel

Description

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.

https://nvd.nist.gov/vuln/detail/CVE-2018-1066

Other Downloads


CVEs


Live chat
Online