CVE-2018-1066

2018-03-0200:00:00

ubuntu.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

79.5%

JSON

The Linux kernel before version 4.11 is vulnerable to a NULL pointer
dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an
attacker controlling a CIFS server to kernel panic a client that has this
server mounted, because an empty TargetInfo field in an NTLMSSP setup
negotiation response is mishandled during session recovery.

OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchlinux< 3.13.0-165.215UNKNOWN
ubuntu16.04noarchlinux< 4.4.0-87.110UNKNOWN
ubuntu16.04noarchlinux-aws< 4.4.0-1026.35UNKNOWN
ubuntu16.04noarchlinux-gke< 4.4.0-1022.22UNKNOWN
ubuntu16.04noarchlinux-hwe< 4.8.0-54.57~16.04.1UNKNOWN
ubuntu16.04noarchlinux-hwe-edge< 4.8.0-54.57~16.04.1UNKNOWN
ubuntu14.04noarchlinux-lts-xenial< 4.4.0-87.110~14.04.1UNKNOWN
ubuntu16.04noarchlinux-raspi2< 4.4.0-1065.73UNKNOWN
ubuntu16.04noarchlinux-snapdragon< 4.4.0-1067.72UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	14.04	noarch	linux	< 3.13.0-165.215	UNKNOWN
ubuntu	16.04	noarch	linux	< 4.4.0-87.110	UNKNOWN
ubuntu	16.04	noarch	linux-aws	< 4.4.0-1026.35	UNKNOWN
ubuntu	16.04	noarch	linux-gke	< 4.4.0-1022.22	UNKNOWN
ubuntu	16.04	noarch	linux-hwe	< 4.8.0-54.57~16.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-hwe-edge	< 4.8.0-54.57~16.04.1	UNKNOWN
ubuntu	14.04	noarch	linux-lts-xenial	< 4.4.0-87.110~14.04.1	UNKNOWN
ubuntu	16.04	noarch	linux-raspi2	< 4.4.0-1065.73	UNKNOWN
ubuntu	16.04	noarch	linux-snapdragon	< 4.4.0-1067.72	UNKNOWN