PT-2017-3589 · Linux+5 · Linux Kernel+5
Dan Aloni
·
Publicado
2017-02-01
·
Atualizado
2019-04-23
·
CVE-2018-1066
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 4.11
Description:
The issue is related to a NULL pointer dereference in the
setup ntlmv2 rsp() function, located in fs/cifs/cifsencrypt.c. This occurs when an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery. An attacker controlling a CIFS server can exploit this to cause a kernel panic on a client system that has the server mounted. The vulnerability allows a remote attacker to trigger a kernel panic on a vulnerable system when it connects to a controlled CIFS resource.Recommendations:
For Linux kernel versions prior to 4.11, update to version 4.11 or later to resolve the issue. As a temporary workaround, consider restricting access to CIFS servers to minimize the risk of exploitation. Avoid using the
setup ntlmv2 rsp() function until a patch is available.Correção
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Linux Kernel
Red Hat
Suse
Ubuntu