CVE-2018-11071: DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-18 · updated 2026-06-17
Weakness: CWE-20

Description

Dell EMC Isilon OneFS versions 7.1.1.x, 7.2.1.x, 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 and Dell EMC IsilonSD Edge versions 8.0.0.x, 8.0.1.x, 8.1.0.x and 8.1.x prior to 8.1.2 contain a remote process crash vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the isi_drive_d process by sending specially crafted input data to the affected system. This process will then be restarted.

Affected products

EMC Isilon OneFS EMC Isilon OneFS versions prior to 8.1.0.1, EMC Isilon OneFS versions prior to 8.0.1.2, EMC Isilon OneF: from 7.1.1.0 through 7.1.1.11; from 7.2.1.0 through 7.2.1.6; from 8.0.0.0 through 8.0.0.7; from 8.0.1.0 through 8.0.1.2; from 8.1.0.0 through 8.1.0.4; from 8.1.1.0 through 8.1.2.0
EMC Isilonsd Edge: from 8.0.0.0 through 8.0.0.7; from 8.0.1.0 through 8.0.1.2; from 8.1.0.0 before 8.1.2.0 — fixed in 8.1.2.0

How to fix

Upgrade to a fixed version: EMC Isilonsd Edge 8.1.2.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-11071 or the next vulnerability affects your stack