The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 1, 2017 | Apr 28, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | Apr 28, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 16, 2017 | Apr 28, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 30, 2017 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-79-genericUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-snapdragonUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-125-genericUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-4.8.0-59-lowlatency | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub