Name: CVE-2017-7895: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2017-04-28T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-7895, CWE-119, CVSS 9.8, EPSS 0.1081

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

CVSS Details

CVSS 3.1 Base Score: 9.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade kernel-rtUpgrade kernel	Jul 1, 2017	Apr 28, 2017
Debian	—	Upgrade linux	Jun 20, 2017	Apr 28, 2017
Oracle_linux	—	Upgrade kernel-uekUpgrade kernel	May 16, 2017	Apr 28, 2017
Redhat_linux	—	Upgrade kernel-rtUpgrade kernel	Jun 30, 2017	Apr 28, 2017
Ubuntu	—	Upgrade linux-image-4.4.0-79-lowlatencyUpgrade linux-image-4.4.0-1059-snapdragonUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-3.13.0-125-powerpc64-embUpgrade linux-image-lowlatencyUpgrade linux-image-4.8.0-59-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-125-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-gkeUpgrade linux-image-4.8.0-1043-raspi2Upgrade linux-image-genericUpgrade linux-image-4.10.0-27-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1057-raspi2Upgrade linux-image-4.8.0-59-lowlatencyUpgrade linux-image-4.8.0-59-generic-lpaeUpgrade linux-image-4.4.0-1018-awsUpgrade linux-image-4.8.0-59-powerpc-e500mcUpgrade linux-image-4.4.0-79-powerpc64-embUpgrade linux-image-4.8.0-59-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-125-powerpc-smpUpgrade linux-image-4.4.0-1014-gkeUpgrade linux-image-powerpc64-embUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-e500Upgrade linux-image-powerpc-e500mcUpgrade linux-image-awsUpgrade linux-image-4.10.0-22-lowlatencyUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-1006-raspi2Upgrade linux-image-4.4.0-79-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-79-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.10.0-22-generic-lpaeUpgrade linux-image-4.10.0-27-lowlatencyUpgrade linux-image-3.13.0-125-powerpc-e500Upgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.8.0-59-powerpc64-embUpgrade linux-image-3.13.0-125-powerpc-e500mcUpgrade linux-image-4.4.0-79-powerpc-smpUpgrade linux-image-4.4.0-79-powerpc-e500mcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-79-genericUpgrade linux-image-4.10.0-27-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-3.13.0-125-lowlatencyUpgrade linux-image-3.13.0-125-powerpc64-smpUpgrade linux-image-3.13.0-125-generic-lpaeUpgrade linux-image-4.10.0-22-generic	Jun 8, 2017	Apr 28, 2017
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Apr 28, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence