CVE-2017-13005

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

CVE-2017-12898

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...

CVE-2017-12898

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...

CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

UBUNTU-CVE-2017-12898

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:interpreply...

CVE-2017-13005

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:xidmapenter...

UBUNTU-CVE-2017-13001

The NFS parser in tcpdump before 4.9.2 has a buffer over-read in print-nfs.c:nfsprintfh...

The vulnerability of the NFSv4 protocol in the Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the NFSv4 protocol in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions such as downtime or, in rare cases, forced shutdowns of the system...

Design/Logic Flaw

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12859

NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2017-12859

Affected software: NetApp Data ONTAP 8.x.x (7-Mode in NFS environments) prior to 8.2.5. Vulnerability: remote denial of service via unspecified vectors; configured in 7-Mode NFS, exploitable by a remote attacker without authentication. Impact: denial of service; information on exploitation patter...

MGASA-2017-0259 Updated kernel-tmb packages fixes security and other bugs

This kernel-tmb update is based on upstream 4.9.40 and fixes at least the following security issues: Linux kernel built with the VirtIO GPU driverCONFIGDRMVIRTIOGPU support is vulnerable to a memory leakage issue. It could occur while creating a virtio gpu object in virtiogpuobjectcreate. A...

MGASA-2017-0258 Updated kernel-linus packages fixes security and other bugs

This kernel-linus update is based on upstream 4.9.40 and fixes at least the following security issues: Linux kernel built with the VirtIO GPU driverCONFIGDRMVIRTIOGPU support is vulnerable to a memory leakage issue. It could occur while creating a virtio gpu object in virtiogpuobjectcreate. A...

openSUSE Security Update : the Linux Kernel (openSUSE-2017-890)

The openSUSE Leap 42.3 kernel was updated to 4.4.79 to receive various security and bugfixes. The following security bugs were fixed : - CVE-2017-7542: The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel allowed local users to cause a denial of service integer overflow and...

Security update for the Linux Kernel (important)

The openSUSE Leap 42.3 kernel was updated to 4.4.79 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-7542: The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel allowed local users to cause a denial of service integer overflow and...

vCenter Server Appliance - Backup/Restore Recommendations

Native File-Based Backup and Restore Recommended vCenter Server Appliance Data Integrity Best Practices recommends using the native file-based backup and restore operations to protect the vCenter Server Appliance. Review: VMware vSphere User Guide: Considerations and Limitations for File-Based...

kernel: NFSv4 server does not properly validate layout type when processing NFSv4 pNFS LAYOUTGET operand

It was found that the NFSv4 server in the Linux kernel did not properly validate layout type when processing NFSv4 pNFS LAYOUTGET and GETDEVICEINFO operands. A remote attacker could use this flaw to soft-lockup the system and thus cause denial of service...

CVE-2017-10036

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NFSv4. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFSv4 to compromise Solaris. Successful attacks of this...

kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...