CVE-2018-16871 A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null poi...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.18.20-1 | 4.18.20-1 |
| debian/linux(Debian:13) | < 4.18.20-1 | 4.18.20-1 |
| debian/linux(Debian:14) | < 4.18.20-1 | 4.18.20-1 |
| Linux kernel | >= 3.0, <= 4.20 | No fix listed |
| redhat developer tools | = 1.0 | No fix listed |
| redhat mrg realtime | = 2.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 7.4 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.4 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.4 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| netapp cloud backup | All versions | No fix listed |
| netapp h410c firmware | All versions | No fix listed |
| netapp h300s firmware | All versions | No fix listed |
| netapp h500s firmware | All versions | No fix listed |
| netapp h700s firmware | All versions | No fix listed |
| netapp h300e firmware | All versions | No fix listed |
| netapp h500e firmware | All versions | No fix listed |
| netapp h700e firmware | All versions | No fix listed |
| netapp h410s firmware | All versions | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat/kernel | = all 3.x, all 4.x up to 4.20 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-16871 vendor-advisory
- RHSA-2019:2696 third-party-advisory vendor-advisory
- RHSA-2019:2730 third-party-advisory vendor-advisory
- RHSA-2020:0740 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- security.netapp.com third-party-advisory
- support.f5.com third-party-advisory
- support.f5.com