CVE-2018-11071
High
Description
Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.
SeverityHigh
CVSS7.5
Exploit probability—
ProductEmc Isilon Onefs
PublishedSep 18, 2018
First seenSep 18, 2018
How to fix
Update
- emc isilonsd_edge8.1.2.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc isilon_onefs | 7.1.1.0 ≤ v ≤ 7.1.1.11, 7.2.1.0 ≤ v ≤ 7.2.1.6, 8.0.0.0 ≤ v ≤ 8.0.0.7, 8.0.1.0 ≤ v ≤ 8.0.1.2, 8.1.0.0 ≤ v ≤ 8.1.0.4, 8.1.1.0 ≤ v ≤ 8.1.2.0 | — |
| emc isilonsd_edge | 8.0.0.0 ≤ v ≤ 8.0.0.7, 8.0.1.0 ≤ v ≤ 8.0.1.2, 8.1.0.0 ≤ v < 8.1.2.0 | 8.1.2.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.