CVE-2018-1218

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-03-19 · updated 2026-06-17
Weakness: CWE-119

Description

In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes a buffer overflow condition when handling certain messages. A remote unauthenticated attacker could potentially exploit this vulnerability to cause a denial of service to the users of NetWorker systems.

Affected products

Dell NetWorker: before 9.1.1.6; before 9.2.1.1; before 8.2.4.11; through 9.0.1 — fixed in 8.2.4.11, 9.1.1.6, 9.2.1.1

How to fix

Upgrade to a fixed version: Dell NetWorker 8.2.4.11, 9.1.1.6, 9.2.1.1. Check the vendor advisory for mitigations.

References

http://seclists.org/fulldisclosure/2018/Mar/43
http://www.securitytracker.com/id/1040546
https://www.exploit-db.com/exploits/44332/
http://seclists.org/fulldisclosure/2018/Mar/43
http://www.securitytracker.com/id/1040546
https://www.exploit-db.com/exploits/44332/

Get alerted when CVE-2018-1218 or the next vulnerability affects your stack