NetSight
IP …
critical9.8

CVE-2017-7895

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to tr…

Impact

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 3.2.89
from 3.3 before 3.16.44
from 3.17.0 before 4.1.40
from 4.2 before 4.4.67
from 4.5.0 before 4.9.26
from 4.10 before 4.10.14
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-119

References