CVE-2017-7895

2017-04-28T10:59:00
ID CVE-2017-7895
Type cve
Reporter cve@mitre.org
Modified 2019-10-03T00:03:00

Description

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.