Description
Incorrect buffer length handling in the ncp_read_kernel function in fs/ncpfs/ncplib_kernel.c in the Linux kernel through 4.15.11, and in drivers/staging/ncpfs/ncplib_kernel.c in the Linux kernel 4.16-rc through 4.16-rc6, could be exploited by malicious NCPFS servers to crash the kernel or execute code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.debian.org/security/2018/dsa-4187 ↗
- https://usn.ubuntu.com/3654-1/ ↗
- http://www.securityfocus.com/bid/103476 ↗
- https://www.debian.org/security/2018/dsa-4188 ↗
- https://www.mail-archive.com/netdev%40vger.kernel.org/msg223373.html ↗
- https://usn.ubuntu.com/3653-2/ ↗
- https://usn.ubuntu.com/3655-1/ ↗
- https://usn.ubuntu.com/3654-2/ ↗
- https://lists.debian.org/debian-lts-announce/2018/05/msg00000.html ↗
- https://usn.ubuntu.com/3655-2/ ↗
- https://usn.ubuntu.com/3656-1/ ↗
- https://usn.ubuntu.com/3653-1/ ↗
- https://usn.ubuntu.com/3657-1/ ↗
- http://www.openwall.com/lists/oss-security/2022/12/27/3 ↗