Wind River Support Network

HomeDefectsSCP7-785
Fixed

SCP7-785 : Security Advisory - linux - CVE-2018-1066

Created: Mar 15, 2018    Updated: Sep 13, 2018
Resolved Date: Apr 25, 2018
Found In Version: 7.0.0.28
Fix Version: 7.0.0.29
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Kernel

Description

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.

https://nvd.nist.gov/vuln/detail/CVE-2018-1066

Other Downloads


Live chat
Online