Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30990
HistoryJun 17, 2021 - 7:21 a.m.

Denial Of Service (DoS)

2021-06-1707:21:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
kernel
vulnerability
dos
cifs
server

EPSS

0.007

Percentile

79.8%

kernel is vulnerable to denial of service. A NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() allows an attacker who is controlling a CIFS server to cause a kernel panic in a client that has this server mounted, This is due to an empty TargetInfo field in an NTLMSSP setup negotiation response which is mishandled during session recovery.