CVE-2018-1218

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow condition when handling certain messages. A remote unauthenticated attacker could potentially exploit this vulnerability to cause a denial of service to the users of NetWorker systems.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Dell EMC	Dell EMC NetWorker	prior to 9.2.1.1; prior to 9.1.1.6; 9.0.x; prior to 8.2.4.11

References

http://seclists.org/fulldisclosure/2018/Mar/43Mailing List, Third Party Advisory
http://www.securitytracker.com/id/1040546Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44332/Exploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Mar/43Mailing List, Third Party Advisory
http://www.securitytracker.com/id/1040546Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/44332/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 19, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-121808.8Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information d CVE-2018-121816.0Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via CVE-2018-121826.7Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, inf CVE-2018-121836.8Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege, information disclosure CVE-2018-121856.8Insufficient input validation in Intel(R) AMT in Intel(R) CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 may allow an unauthenti CVE-2018-121877.5Insufficient input validation in Intel(R) Active Management Technology (Intel(R) AMT) before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20 CVE-2018-121884.6Insufficient input validation in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before version 3.1.60 or 4.0 CVE-2018-121894.4Unhandled exception in Content Protection subsystem in Intel CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel TXE before CVE-2018-12194.3EMC RSA Archer, versions prior to 6.2.0.8, contains an improper access control vulnerability on an API which is used to enumerate user infor CVE-2018-121906.7Insufficient input validation in Intel(r) CSME subsystem before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 or Intel(r) TXE before 3.1.6 CVE-2018-121917.6Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services b CVE-2018-121926.8Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services befo