Design/Logic Flaw

2012-06-1310:24:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:N/I:N/A:C

0.002 Low

EPSS

Percentile

59.9%

JSON

The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.

CPENameOperatorVersion
linux_kerneleq3.3 rc4
linux_kerneleq3.3 rc5
linux_kerneleq3.3 rc3
linux_kerneleq3.3 rc2
linux_kernelle3.3.1
linux_kerneleq3.3 rc6
linux_kerneleq3.3 rc1
linux_kerneleq3.3
linux_kerneleq3.3 rc7

Name	Operator	Version
linux_kernel	eq	3.3 rc4
linux_kernel	eq	3.3 rc5
linux_kernel	eq	3.3 rc3
linux_kernel	eq	3.3 rc2
linux_kernel	le	3.3.1
linux_kernel	eq	3.3 rc6
linux_kernel	eq	3.3 rc1
linux_kernel	eq	3.3
linux_kernel	eq	3.3 rc7