The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-firmwareUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernelUpgrade python-perfUpgrade kernel-docUpgrade kernel-develUpgrade perf | Dec 1, 2016 | May 17, 2012 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 17, 2012 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 17, 2012 |
| Suse | — | Upgrade kernel-ppc64-baseUpgrade kernel-ppc64Upgrade xen-kmp-paeUpgrade kernel-ec2-baseUpgrade kernel-pae-extraUpgrade kernel-ppc64-develUpgrade xen-kmp-defaultUpgrade kernel-sourceUpgrade kernel-trace-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-paeUpgrade kernel-trace-baseUpgrade kernel-xen-develUpgrade kernel-xen-baseUpgrade kernel-default-extraUpgrade kernel-ec2-develUpgrade kernel-pae-baseUpgrade kernel-default-manUpgrade kernel-traceUpgrade kernel-xenUpgrade kernel-xen-extraUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-pae-develUpgrade xen-kmp-traceUpgrade kernel-trace-develUpgrade kernel-default-develUpgrade kernel-ec2 | Feb 17, 2015 | Jun 27, 2013 |
| Ubuntu | — | Upgrade linux-image-2.6.38-15-powerpc64-smpUpgrade linux-image-3.0.0-1211-omap4Upgrade linux-image-2.6.38-15-powerpcUpgrade linux-image-2.6.38-15-powerpc-smpUpgrade linux-image-2.6.38-15-omapUpgrade linux-image-3.0.0-21-omapUpgrade linux-image-2.6.38-15-genericUpgrade linux-image-2.6.38-15-versatileUpgrade linux-image-3.0.0-21-virtualUpgrade linux-image-3.0.0-21-powerpc64-smpUpgrade linux-image-2.6.38-1209-omap4Upgrade linux-image-3.0.0-21-powerpcUpgrade linux-image-3.0.0-21-powerpc-smpUpgrade linux-image-2.6.38-15-serverUpgrade linux-image-3.0.0-21-genericUpgrade linux-image-2.6.38-15-virtualUpgrade linux-image-2.6.38-15-generic-paeUpgrade linux-image-3.0.0-21-generic-paeUpgrade linux-image-3.0.0-21-server | Nov 8, 2024 | May 17, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub