The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade python-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-firmwareUpgrade kernel-doc | Dec 1, 2016 | Jun 13, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 13, 2012 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jun 13, 2012 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade kernel-pae-extraUpgrade kernel-sourceUpgrade kernel-xen-develUpgrade kernel-ppc64Upgrade kernel-trace-extraUpgrade kernel-xen-baseUpgrade kernel-ppc64-develUpgrade kernel-ec2-develUpgrade kernel-defaultUpgrade kernel-ec2-baseUpgrade xen-kmp-paeUpgrade kernel-ppc64-baseUpgrade kernel-pae-baseUpgrade kernel-xen-extraUpgrade kernel-pae-develUpgrade kernel-default-extraUpgrade kernel-traceUpgrade kernel-paeUpgrade kernel-symsUpgrade xen-kmp-traceUpgrade kernel-trace-baseUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-ec2Upgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-trace-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-26-omapUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.2.0-1415-omap4Upgrade linux-image-3.2.0-26-virtualUpgrade linux-image-3.2.0-26-generic-paeUpgrade linux-image-3.0.0-22-powerpc64-smpUpgrade linux-image-3.2.0-26-highbankUpgrade linux-image-3.2.0-26-genericUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-22-generic-paeUpgrade linux-image-3.0.0-22-genericUpgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-1212-omap4Upgrade linux-image-3.0.0-22-powerpc-smpUpgrade linux-image-3.0.0-22-virtualUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-3.0.0-22-serverUpgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-3.2.0-26-powerpc-smpUpgrade linux-image-3.0.0-22-powerpcUpgrade linux-image-3.2.0-26-powerpc64-smpUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-3.0.0-22-omapUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-2.6.38-1209-omap4 | Nov 8, 2024 | Jun 13, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub