Maple Labs

CVE search · CVE-2018-11071

CVE-2018-11071

high 7.5

Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
security_alert@emc.com
Weakness
CWE-20

Severity

VersionScoreVectorSource
CVSS 3.0 high 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H security_alert@emc.comSecondary
CVSS 3.0 high 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H nvd@nist.govPrimary
CVSS 2.0 medium 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • emc · isilon_onefs
  • emc · isilonsd_edge

References