CVE-2018-1066

The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allows an attacker controlling a CIFS server to kernel panic a client that has this server mounted, because an empty TargetInfo field in an NTLMSSP setup negotiation response is mishandled during session recovery.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
VendorProductVersion
linuxlinux_kernel
𝑥
≤ 4.10.15
debiandebian_linux
8.0
debiandebian_linux
9.0
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bullseye
5.10.223-1
fixed
wheezy
not-affected
bullseye (security)
5.10.226-1
fixed
bookworm
6.1.106-3
fixed
bookworm (security)
6.1.112-1
fixed
trixie
6.11.5-1
fixed
sid
6.11.6-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
linux
cosmic
not-affected
bionic
not-affected
artful
not-affected
xenial
Fixed 4.4.0-87.110
released
trusty
Fixed 3.13.0-165.215
released
linux-armadaxp
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-aws
cosmic
not-affected
bionic
not-affected
artful
dne
xenial
Fixed 4.4.0-1026.35
released
trusty
not-affected
linux-aws-hwe
cosmic
dne
bionic
dne
xenial
not-affected
trusty
dne
linux-azure
cosmic
not-affected
bionic
not-affected
artful
dne
xenial
not-affected
trusty
not-affected
linux-azure-edge
cosmic
dne
bionic
not-affected
xenial
not-affected
trusty
dne
linux-euclid
cosmic
dne
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-flo
cosmic
dne
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-gcp
cosmic
not-affected
bionic
not-affected
artful
dne
xenial
not-affected
trusty
dne
linux-gcp-edge
cosmic
dne
bionic
not-affected
xenial
dne
trusty
dne
linux-gke
cosmic
dne
bionic
dne
artful
dne
xenial
Fixed 4.4.0-1022.22
released
trusty
dne
linux-goldfish
cosmic
dne
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-grouper
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-hwe
cosmic
dne
bionic
not-affected
artful
dne
xenial
Fixed 4.8.0-54.57~16.04.1
released
trusty
dne
linux-hwe-edge
cosmic
dne
bionic
not-affected
artful
dne
xenial
Fixed 4.8.0-54.57~16.04.1
released
trusty
dne
linux-kvm
cosmic
not-affected
bionic
not-affected
artful
dne
xenial
not-affected
trusty
dne
linux-linaro-omap
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-linaro-shared
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-linaro-vexpress
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-quantal
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-raring
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-saucy
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-trusty
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-utopic
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-vivid
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
ignored
linux-lts-wily
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-lts-xenial
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
Fixed 4.4.0-87.110~14.04.1
released
linux-maguro
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-mako
cosmic
dne
bionic
dne
artful
dne
xenial
ignored
trusty
dne
linux-manta
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-oem
cosmic
not-affected
bionic
not-affected
artful
dne
xenial
not-affected
trusty
dne
linux-oracle
cosmic
not-affected
bionic
not-affected
xenial
not-affected
trusty
dne
linux-qcm-msm
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
linux-raspi2
cosmic
not-affected
bionic
not-affected
artful
not-affected
xenial
Fixed 4.4.0-1065.73
released
trusty
dne
linux-snapdragon
cosmic
dne
bionic
not-affected
artful
not-affected
xenial
Fixed 4.4.0-1067.72
released
trusty
dne
linux-ti-omap4
cosmic
dne
bionic
dne
artful
dne
xenial
dne
trusty
dne
Common Weakness Enumeration
References
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cabfb3680f78981d26c078a26e5c748531257ebb
http://www.securityfocus.com/bid/103378
https://bugzilla.redhat.com/show_bug.cgi?id=1539599
https://github.com/torvalds/linux/commit/cabfb3680f78981d26c078a26e5c748531257ebb
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
https://patchwork.kernel.org/patch/10187633/
https://usn.ubuntu.com/3880-1/
https://usn.ubuntu.com/3880-2/
https://www.debian.org/security/2018/dsa-4187
https://www.debian.org/security/2018/dsa-4188
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cabfb3680f78981d26c078a26e5c748531257ebb
http://www.securityfocus.com/bid/103378
https://bugzilla.redhat.com/show_bug.cgi?id=1539599
https://github.com/torvalds/linux/commit/cabfb3680f78981d26c078a26e5c748531257ebb
https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html
https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html
https://patchwork.kernel.org/patch/10187633/
https://usn.ubuntu.com/3880-1/
https://usn.ubuntu.com/3880-2/
https://www.debian.org/security/2018/dsa-4187
https://www.debian.org/security/2018/dsa-4188