CVE-2008-3915 Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
HighCVSS 9.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.6.18 | No fix listed |
| Linux kernel | = 2.6.19.4 | No fix listed |
| Linux kernel | = 2.6.19.5 | No fix listed |
| Linux kernel | = 2.6.19.7 | No fix listed |
| Linux kernel | = 2.6.20.16 | No fix listed |
| Linux kernel | = 2.6.20.17 | No fix listed |
| Linux kernel | = 2.6.20.18 | No fix listed |
| Linux kernel | = 2.6.20.19 | No fix listed |
| Linux kernel | = 2.6.20.20 | No fix listed |
| Linux kernel | = 2.6.20.21 | No fix listed |
| Linux kernel | = 2.6.21.5 | No fix listed |
| Linux kernel | = 2.6.21.6 | No fix listed |
| Linux kernel | = 2.6.21.7 | No fix listed |
| Linux kernel | = 2.6.22 | No fix listed |
| Linux kernel | = 2.6.22.2 | No fix listed |
| Linux kernel | = 2.6.22.8 | No fix listed |
| Linux kernel | = 2.6.22.9 | No fix listed |
| Linux kernel | = 2.6.22.10 | No fix listed |
| Linux kernel | = 2.6.22.11 | No fix listed |
| Linux kernel | = 2.6.22.12 | No fix listed |
| Linux kernel | = 2.6.22.13 | No fix listed |
| Linux kernel | = 2.6.22.14 | No fix listed |
| Linux kernel | = 2.6.22.15 | No fix listed |
| Linux kernel | = 2.6.22.17 | No fix listed |
| Linux kernel | = 2.6.22.18 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | = 2.6.22.19 | No fix listed |
| Linux kernel | = 2.6.22.20 | No fix listed |
| Linux kernel | = 2.6.22.21 | No fix listed |
| Linux kernel | = 2.6.22.22 | No fix listed |
| Linux kernel | = 2.6.23 | No fix listed |
| Linux kernel | = 2.6.23.8 | No fix listed |
| Linux kernel | = 2.6.23.9 | No fix listed |
| Linux kernel | = 2.6.23.10 | No fix listed |
| Linux kernel | = 2.6.23.11 | No fix listed |
| Linux kernel | = 2.6.23.12 | No fix listed |
| Linux kernel | = 2.6.23.13 | No fix listed |
| Linux kernel | = 2.6.23.15 | No fix listed |
| Linux kernel | = 2.6.23.16 | No fix listed |
| Linux kernel | = 2.6.23.17 | No fix listed |
| Linux kernel | = 2.6.24 | No fix listed |
| Linux kernel | = 2.6.24.1 | No fix listed |
| Linux kernel | = 2.6.24.2 | No fix listed |
| Linux kernel | = 2.6.24.3 | No fix listed |
| Linux kernel | = 2.6.24.4 | No fix listed |
| Linux kernel | = 2.6.24.5 | No fix listed |
| Linux kernel | = 2.6.24.6 | No fix listed |
| Linux kernel | = 2.6.24.7 | No fix listed |
| Linux kernel | = 2.6.25 | No fix listed |
| Linux kernel | = 2.6.25.1 | No fix listed |
| Linux kernel | = 2.6.25.2 | No fix listed |
| Linux kernel | = 2.6.25.3 | No fix listed |
| Linux kernel | = 2.6.25.4 | No fix listed |
| Linux kernel | = 2.6.25.5 | No fix listed |
| Linux kernel | = 2.6.25.6 | No fix listed |
| Linux kernel | = 2.6.25.7 | No fix listed |
| Linux kernel | = 2.6.25.8 | No fix listed |
| Linux kernel | = 2.6.25.9 | No fix listed |
| Linux kernel | = 2.6.25.10 | No fix listed |
| Linux kernel | = 2.6.25.11 | No fix listed |
| Linux kernel | = 2.6.25.12 | No fix listed |
| Linux kernel | = 2.6.25.13 | No fix listed |
| Linux kernel | = 2.6.25.14 | No fix listed |
| Linux kernel | = 2.6.25.15 | No fix listed |
References
- git.kernel.org
- [linux-kernel] 20080903 [patch 05/16] nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- 31881 third-party-advisory
- 32190 third-party-advisory
- 32393 third-party-advisory
- DSA-1636 vendor-advisory
- www.kernel.org
- [oss-security] 20080904 Re: CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- [oss-security] 20080904 CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl mailing-list
- RHSA-2008:0857 vendor-advisory
- 31133 vdb-entry
- USN-659-1 vendor-advisory
- bugzilla.redhat.com
- linux-kernel-nfsv4-bo(45055) vdb-entry