The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perfUpgrade kernel-docUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debugUpgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-devel | Dec 1, 2016 | May 17, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Suse | — | Upgrade kernel-xen-baseUpgrade kernel-trace-baseUpgrade xen-kmp-traceUpgrade kernel-ec2Upgrade kernel-xen-develUpgrade kernel-default-develUpgrade kernel-traceUpgrade kernel-pae-baseUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-default-manUpgrade kernel-pae-develUpgrade kernel-xenUpgrade kernel-default-baseUpgrade kernel-trace-develUpgrade kernel-paeUpgrade kernel-xen-extraUpgrade kernel-symsUpgrade kernel-ppc64-baseUpgrade kernel-sourceUpgrade kernel-trace-extraUpgrade xen-kmp-defaultUpgrade kernel-ppc64Upgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade kernel-ppc64-develUpgrade kernel-pae-extraUpgrade kernel-docsUpgrade xen-kmp-pae | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-21-genericUpgrade linux-image-3.0.0-21-serverUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-3.0.0-21-powerpc-smpUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-3.0.0-21-generic-paeUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.0.0-21-powerpc64-smpUpgrade linux-image-3.0.0-21-virtualUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.0.0-21-powerpcUpgrade linux-image-3.0.0-21-omapUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-3.0.0-1211-omap4Upgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.38-15-powerpc64-smp | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub