The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jul 1, 2017 | Apr 28, 2017 |
| Debian | — | Upgrade linux | Jun 20, 2017 | Apr 28, 2017 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | May 16, 2017 | Apr 28, 2017 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 30, 2017 | Apr 28, 2017 |
| Ubuntu | — | Upgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-generic-lts-trustyUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-3.13.0-125-genericUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-79-genericUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-virtualUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-4.10.0-22-genericUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-powerpc-e500Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-awsUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenial | Jun 8, 2017 | Apr 28, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 28, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub