CVE-2017-7895: Buffer Overflow
Last updated 29 November 2024
Other sources
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
— Launchpad
The NFSv3 server in the Linux kernel does not properly handle payload bounds checking of WRITE requests, which allows remote attackers to read up to about 1 MB - 4096 bytes of kernel memory to a file. Write access to a NFS mount is required.
References:
http://seclists.org/oss-sec/2017/q2/196
Upstream patch:
https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2017-7895.
What is the severity of CVE-2017-7895?
The severity of CVE-2017-7895 is high.
What is the affected software for CVE-2017-7895?
The affected software for CVE-2017-7895 includes Linux kernel versions up to 4.10.13.
How can remote attackers exploit CVE-2017-7895?
Remote attackers can exploit CVE-2017-7895 by triggering pointer-arithmetic errors or causing other unspecified impact via crafted requests.
Are there any references available for CVE-2017-7895?
Yes, there are references available for CVE-2017-7895. You can find them at the following links: [reference 1](http://seclists.org/oss-sec/2017/q2/196), [reference 2](https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309), [reference 3](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1446541).