Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Control vulnerability in NFS server (nfsd) that can result in remote users reading or writing files they should not be able to via NFS. This attack appear to be exploitable via NFS server must export a filesystem with the "rootsquash" options enabled. This vulnerability appears to have been fixed in after commit 1995266727fa.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-docUpgrade python-perf-debuginfoUpgrade python-perf | Apr 27, 2020 | Feb 9, 2018 |
| Amazon_linux | — | Upgrade kernel | Feb 22, 2018 | Feb 9, 2018 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 9, 2018 |
| Suse | — | Upgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kernel-default | May 20, 2018 | Feb 9, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub