Microsoft Windows and Windows Server Remote Code Execution Vulnerability (CNVD-2021-71409)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in the Network File System in Microsoft Windows and Windows...

PT-2021-7264 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel NFS subsystem allows for an out of memory bounds write, potentially enabling a user with access to the NFS mount to crash the system or escalate privileges...

CVE-2021-28445

Windows Network File System Remote Code Execution Vulnerability...

Remote code execution

Windows Network File System Remote Code Execution Vulnerability...

CVE-2021-28445 Windows Network File System Remote Code Execution Vulnerability

...

CVE-2021-28445

Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.

Windows Network File System Remote Code Execution Vulnerability

...

Microsoft Windows Code Injection Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A remote code execution vulnerability exists in the Network File System in Microsoft Windows and Windows...

CVE-2021-28445: Undefined Security Weakness

Windows Network File System Remote Code Execution Vulnerability...

PT-2021-2591 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in code generation management in the Network File System NFS of Microsoft Windows operating systems. It allows remote attackers to execute arbitrary code and...

KB5001387: Windows Server 2012 Security Update (Apr 2021)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Win32k Elevation of Privilege Vulnerability CVE-2021-27072 - Microsoft Internet Messaging API Remote Code Execution Vulnerability CVE-2021-27089 - RPC Endpoint Mapper Service Elevation o...

KLA12142 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service, gain privileges, bypass security restrictions, spoof user interface. Below is a...

PT-2021-8037

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the validation of UDP retransmission in the Linux kernel's NFS module. Specifically, it concerns the xprt calc majortimeo function, where a shift out-of-bounds...

kernel: umask not applied on filesystem without ACL support

A vulnerability was found in NFSv4.2 in the Linux kernel, where a server fails to correctly apply umask when creating a new object on filesystem without ACL support for example, ext4 with the "noacl" mount option. This flaw allows a local attacker with a user privilege to cause a kernel informati...

kernel: TOCTOU mismatch in the NFS client code

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation...

USN-4752-1 linux-oem-5.6 vulnerabilities

Daniele Antonioli, Nils Ole Tippenhauer, and Kasper Rasmussen discovered that legacy pairing and secure-connections pairing authentication in the Bluetooth protocol could allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. A physically proxima...

Network File System DoS

The vulnerability of the Network File System NFS on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

kernel: TOCTOU mismatch in the NFS client code

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation...

PT-2021-2043 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to insufficient input validation in the Network File System NFS of Windows operating systems. This can be exploited by a remote attacker to cause a denial...

CVE-2020-11920

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code...