NULL Pointer Dereference Affecting kernel-tools-libs package, versions <0:4.18.0-193.el8


Severity

Recommended
0.0
high
0
10

Based on CentOS security rating.

Threat Intelligence

EPSS
0.9% (84th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about NULL Pointer Dereference vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-CENTOS8-KERNELTOOLSLIBS-2038388
  • published26 Jul 2021
  • disclosed3 Jun 2019

Introduced: 3 Jun 2019

CVE-2018-16871  (opens in a new tab)
CWE-476  (opens in a new tab)

How to fix?

Upgrade Centos:8 kernel-tools-libs to version 0:4.18.0-193.el8 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-tools-libs package and not the kernel-tools-libs package as distributed by Centos. See How to fix? for Centos:8 relevant fixed versions and status.

A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.

CVSS Scores

version 3.1