CVE-2017-7895: Buffer Overflow

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID is CVE-2017-7895.

Q: What is the severity of CVE-2017-7895?

The severity of CVE-2017-7895 is high.

Q: What is the affected software for CVE-2017-7895?

The affected software for CVE-2017-7895 includes Linux kernel versions up to 4.10.13.

Q: How can remote attackers exploit CVE-2017-7895?

Remote attackers can exploit CVE-2017-7895 by triggering pointer-arithmetic errors or causing other unspecified impact via crafted requests.

Q: Are there any references available for CVE-2017-7895?

Yes, there are references available for CVE-2017-7895. You can find them at the following links: [reference 1](http://seclists.org/oss-sec/2017/q2/196), [reference 2](https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309), [reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1446541).

Published Apr 27, 2017

Updated

Last updated 29 November 2024

Other sources

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

— Launchpad

The NFSv3 server in the Linux kernel does not properly handle payload bounds checking of WRITE requests, which allows remote attackers to read up to about 1 MB - 4096 bytes of kernel memory to a file. Write access to a NFS mount is required.

References:

http://seclists.org/oss-sec/2017/q2/196

Upstream patch:

https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309

— Red Hat

Affected Software

35 affected componentsFixes available

Linux Linux kernel<3.2.89

Linux Linux kernel>=3.3<3.16.44

Linux Linux kernel>=3.17.0<4.1.40

Linux Linux kernel>=4.2<4.4.67

Linux Linux kernel>=4.5.0<4.9.26

Linux Linux kernel>=4.10<4.10.14

Debian Debian Linux=8.0

Debian Debian Linux=9.0

debian/linux

5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

ubuntu/linux<3.13.0-125.174

3.13.0-125.174

ubuntu/linux-lts-xenial<4.4.0-79.100~14.04.1

4.4.0-79.100~14.04.1

ubuntu/linux<4.4.0-79.100

4.4.0-79.100

ubuntu/linux-aws<4.4.0-1018.27

4.4.0-1018.27

ubuntu/linux-gke<4.4.0-1014.14

4.4.0-1014.14

ubuntu/linux-hwe<4.10.0-32.36~16.04.1

4.10.0-32.36~16.04.1

ubuntu/linux-raspi2<4.4.0-1057.64

4.4.0-1057.64

ubuntu/linux-snapdragon<4.4.0-1059.63

4.4.0-1059.63

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-gke*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-azure-6.11*

ubuntu/linux-gcp-6.11*

ubuntu/linux-hwe-6.11*

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-raspi-realtime*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 3.13.0-125.174
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-79.100~14.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.4.0-79.100
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1018.27
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 4.4.0-1014.14
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.10.0-32.36~16.04.1
Upgrade
Upgrade ubuntu/linux-raspi2 to a version that resolves this vulnerability.
Fixed in 4.4.0-1057.64
Upgrade
Upgrade ubuntu/linux-snapdragon to a version that resolves this vulnerability.
Fixed in 4.4.0-1059.63
Upgrade
Upgrade Linux kernel to a version that resolves this vulnerability.
Patch 13bf9fbff0e5e099e2b6f003a0ab8ae145436309

Event History

Apr 27, 2017

Data Sourced

via Red Hat·09:34 AM

DescriptionSeverityAffected Software

Apr 28, 2017

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID is CVE-2017-7895.

What is the severity of CVE-2017-7895?

The severity of CVE-2017-7895 is high.

What is the affected software for CVE-2017-7895?

The affected software for CVE-2017-7895 includes Linux kernel versions up to 4.10.13.

How can remote attackers exploit CVE-2017-7895?

Remote attackers can exploit CVE-2017-7895 by triggering pointer-arithmetic errors or causing other unspecified impact via crafted requests.

Are there any references available for CVE-2017-7895?

Yes, there are references available for CVE-2017-7895. You can find them at the following links: [reference 1](http://seclists.org/oss-sec/2017/q2/196), [reference 2](https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309), [reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1446541).

CVE-2017-7895: Buffer Overflow

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

What is the severity of CVE-2017-7895?

What is the affected software for CVE-2017-7895?

How can remote attackers exploit CVE-2017-7895?

Are there any references available for CVE-2017-7895?

Company

Resources

Contact