The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nfs-utils | Jul 30, 2024 | Feb 26, 2014 |
| Oracle_linux | — | Upgrade nfs-utils | Oct 16, 2024 | Feb 26, 2014 |
| Suse | — | Upgrade nfs-docUpgrade nfs-clientUpgrade nfs-kernel-server | Dec 12, 2013 | Dec 10, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub