NetSight
IP …
high7.5

CVE-2017-7645

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long…

Impact

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.89
from 3.3 before 3.10.107
from 3.11 before 3.12.74
from 3.13 before 3.16.44
from 3.17 before 3.18.52
from 3.19 before 4.1.40
DebianDebian Linux
Versions 8.0, 9.0
CanonicalUbuntu Linux
Version 14.04

Weakness classification

CWE-20

References