CVE-2018-1066

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker…

published March 2, 2018

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03435 · 88.9th percentile
Published
2018-03-02T08:00Z
EPSS history
Timeline
  • 02 MAR 08:00Z
    The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker…
    cvelistv5