Lucene search

K
f5F5F5:K05087544
HistoryFeb 20, 2018 - 12:00 a.m.

K05087544 : Linux kernel vulnerability CVE-2018-1000028

2018-02-2000:00:00
my.f5.com
17

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

Security Advisory Description

Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server (nfsd) that can result in remote users reading or writing files they should not be able to via NFS. This attack appear to be exploitable via NFS server must export a filesystem with the “rootsquash” options enabled. This vulnerability appears to have been fixed in after commit 1995266727fa. (CVE-2018-1000028)

Impact

There is no impact; F5 products are not affected by this vulnerability.

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%