The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade python-perfUpgrade kernelUpgrade kernel-debug-develUpgrade perfUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-develUpgrade kernel-doc | Dec 1, 2016 | Jun 13, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jun 13, 2012 |
| Suse | — | Upgrade kernel-traceUpgrade kernel-trace-develUpgrade kernel-default-extraUpgrade kernel-xenUpgrade kernel-pae-develUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-xen-extraUpgrade kernel-paeUpgrade kernel-default-develUpgrade xen-kmp-traceUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-ec2Upgrade xen-kmp-paeUpgrade kernel-pae-baseUpgrade kernel-defaultUpgrade kernel-ec2-develUpgrade kernel-ppc64-develUpgrade kernel-sourceUpgrade kernel-ppc64-baseUpgrade kernel-trace-extraUpgrade kernel-ec2-baseUpgrade kernel-xen-baseUpgrade kernel-ppc64Upgrade kernel-pae-extraUpgrade xen-kmp-defaultUpgrade kernel-xen-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.2.0-26-powerpc64-smpUpgrade linux-image-3.2.0-26-powerpc-smpUpgrade linux-image-3.0.0-22-serverUpgrade linux-image-3.0.0-22-omapUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-3.0.0-22-powerpcUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-3.0.0-22-powerpc-smpUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-22-virtualUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-3.0.0-22-genericUpgrade linux-image-3.0.0-22-generic-paeUpgrade linux-image-3.2.0-26-omapUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.2.0-1415-omap4Upgrade linux-image-3.0.0-22-powerpc64-smpUpgrade linux-image-3.0.0-1212-omap4Upgrade linux-image-3.2.0-26-virtualUpgrade linux-image-3.2.0-26-generic-paeUpgrade linux-image-3.2.0-26-genericUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.2.0-26-highbank | Nov 8, 2024 | Jun 13, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub