CVE-2017-7895 The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possib...
CriticalCVSS 9.8
EPSS 10.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/linux(Debian:12) | < 4.9.25-1 | 4.9.25-1 |
| debian/linux(Debian:13) | < 4.9.25-1 | 4.9.25-1 |
| debian/linux(Debian:14) | < 4.9.25-1 | 4.9.25-1 |
| Linux kernel | < 3.2.89 | 3.2.89 |
| Linux kernel | >= 3.3, < 3.16.44 | 3.16.44 |
| Linux kernel | >= 3.17.0, < 4.1.40 | 4.1.40 |
| Linux kernel | >= 4.2, < 4.4.67 | 4.4.67 |
| Linux kernel | >= 4.5.0, < 4.9.26 | 4.9.26 |
| Linux kernel | >= 4.10, < 4.10.14 | 4.10.14 |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3314-1 vendor-advisory
- USN-3312-1 vendor-advisory
- USN-3312-2 vendor-advisory
- USN-3359-1 vendor-advisory
- USN-3361-1 vendor-advisory
- USN-3360-1 vendor-advisory
- USN-3360-2 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2017-7895 vendor-advisory
- DSA-3886 third-party-advisory vendor-advisory
- 98085 third-party-advisory vdb-entry
- RHSA-2017:1615 third-party-advisory vendor-advisory
- RHSA-2017:1616 third-party-advisory vendor-advisory
- RHSA-2017:1647 third-party-advisory vendor-advisory
- RHSA-2017:1715 third-party-advisory vendor-advisory
- RHSA-2017:1723 third-party-advisory vendor-advisory
- RHSA-2017:1766 third-party-advisory vendor-advisory
- RHSA-2017:1798 third-party-advisory vendor-advisory
- RHSA-2017:2412 third-party-advisory vendor-advisory
- RHSA-2017:2428 third-party-advisory vendor-advisory
- RHSA-2017:2429 third-party-advisory vendor-advisory
- RHSA-2017:2472 third-party-advisory vendor-advisory
- RHSA-2017:2732 third-party-advisory vendor-advisory
- git.kernel.org patch third-party-advisory
- github.com patch third-party-advisory