CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

hl-advisory.asc

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TAMANDUA SEKURE LABS http://tamandua.sekure.org Sao Paulo / Porto Alegre - Brazil Issue: Multiples vulnerabilities in Half-life Dedicated Server for Linux Advisory : sekure-2000-01 Version: 3.1.3.x Patch Availability: Soon Severity: High - Remote acce...