CVE-2018-1066: falha em Linux kernel 4.11
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.4%
The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.
Produtos afetados
n/a · Linux kernel 4.11Referências
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cabfb3680f78981d26c078a26e5c748531257ebbhttps://bugzilla.redhat.com/show_bug.cgi?id=1539599https://github.com/torvalds/linux/commit/cabfb3680f78981d26c078a26e5c748531257ebbhttps://lists.debian.org/debian-lts-announce/2018/07/msg00015.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00016.htmlhttps://patchwork.kernel.org/patch/10187633/https://usn.ubuntu.com/3880-1/https://usn.ubuntu.com/3880-2/https://www.debian.org/security/2018/dsa-4187https://www.debian.org/security/2018/dsa-4188http://www.securityfocus.com/bid/103378