CVE-2018-16871
HIGHCVSS 7.5/10EPSS 2.78%
Last modified
CVE-2018-16871 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. EPSS estimates a 2.78% chance of exploitation in the next 30 days.
Description
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.0, <= 4.20 |
| Redhat | Developer Tools | 1.0 |
| Redhat | Mrg Realtime | 2.0 |
| Redhat | Enterprise Linux | 7.0 |
| Redhat | Enterprise Linux Desktop | 7.0 |
| Redhat | Enterprise Linux Eus | 7.4 |
| Redhat | Enterprise Linux Server | 7.0 |
| Redhat | Enterprise Linux Server Aus | 7.4 |
| Redhat | Enterprise Linux Server Aus | 7.6 |
| Redhat | Enterprise Linux Server Eus | 7.6 |
| Redhat | Enterprise Linux Server Tus | 7.4 |
| Redhat | Enterprise Linux Server Tus | 7.6 |
| Redhat | Enterprise Linux Workstation | 7.0 |
| Netapp | Cloud Backup | All versions |
| Netapp | H410c Firmware | All versions |
| Netapp | H300s Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H300e Firmware | All versions |
| Netapp | H500e Firmware | All versions |
| Netapp | H700e Firmware | All versions |
| Netapp | H410s Firmware | All versions |
References
- https://access.redhat.com/errata/RHSA-2019:2696Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2730Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20211004-0002/Third Party Advisory
- https://support.f5.com/csp/article/K18657134Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2696Third Party Advisory
- https://access.redhat.com/errata/RHSA-2019:2730Third Party Advisory
- https://access.redhat.com/errata/RHSA-2020:0740Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16871Issue Tracking, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20211004-0002/Third Party Advisory
- https://support.f5.com/csp/article/K18657134Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-16871?
A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine and deny access to the NFS server. Any outstanding disk writes to the NFS server will be lost.
How severe is CVE-2018-16871?
CVE-2018-16871 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 2.78% probability of exploitation in the next 30 days.
How do I fix CVE-2018-16871?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-16865An allocation of memory without limits, that could result in…7.8
- CVE-2018-16866An out of bounds read was discovered in systemd-journald in …3.3
- CVE-2018-16867A flaw was found in qemu Media Transfer Protocol (MTP) befor…7.8
- CVE-2018-16868A Bleichenbacher type side-channel based padding oracle atta…5.6
- CVE-2018-16869A Bleichenbacher type side-channel based padding oracle atta…5.7
- CVE-2018-16870It was found that wolfssl before 3.15.7 is vulnerable to a n…
- CVE-2018-16872A flaw was found in qemu Media Transfer Protocol (MTP). The …5.3
- CVE-2018-16873In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" c…8.1
- CVE-2018-16874In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" c…8.1
- CVE-2018-16875The crypto/x509 package of Go before 1.10.6 and 1.11.x befor…5.9
- CVE-2018-16876ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable …5.3
- CVE-2018-16877A flaw was found in the way pacemaker's client-server authen…7.8
Are you affected by CVE-2018-16871?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST