56 matches found
CVE-2026-108985
The libnfs library (versions through 6.0.2 before commit 7613236) is vulnerable to an out-of-bounds write during ZDR decoding. The issue originates in lib/libnfs-zdr.c within the libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array() functions because the caller-supplied maxsize value is...
EUVD-2026-97165
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfszdrbytes, libnfszdrstring, and libnfszdrarray. The caller-supplied maxsize value is not honored...
Updated libnfs package fixes a security vulnerability
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READIOVEC in rpcreadfromsocket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. CVE-2026-57918...
MGASA-2026-0438 Updated libnfs package fixes a security vulnerability
libnfs through 6.0.2 before 935b8db has an xid integer underflow in READIOVEC in rpcreadfromsocket in lib/socket.c during a connection to a crafted NFS server, when the expected pdu size exceeds the absolute pdu size from the xid/record-marker. CVE-2026-57918...
[SECURITY] Fedora 43 Update: libnfs-6.0.2-9.fc43
The libnfs package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level, asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions, and a synchronous library with POSIX-like VFS functions...
Fedora 43 : libnfs (2026-2e196b6fa5)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2e196b6fa5 advisory. Fixes CVE-2026-57918 and CVE-2026-53689 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
[SECURITY] Fedora 44 Update: libnfs-6.0.2-9.fc44
The libnfs package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level, asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions, and a synchronous library with POSIX-like VFS functions...
Fedora 44 : libnfs (2026-8ae1795f2b)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8ae1795f2b advisory. Fixes CVE-2026-57918 and CVE-2026-53689 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
CVE-2026-53689
A flaw was found in libnfs. A remote attacker could exploit a vulnerability related to improper string size validation when a user connects to a specially crafted Network File System NFS server. This could lead to an integer overflow, potentially allowing for information disclosure, data...
Updated libnfs packages fix a security vulnerability
The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...
MGASA-2026-0299 Updated libnfs packages fix a security vulnerability
The updated packages fix a security vulnerability: libnfs through 6.0.2 before 55c18ea does not validate a string size, leading to an integer overflow during a connection to a crafted NFS server. This occurs in libnfszdrstring in lib/libnfs-zdr.c. CVE-2026-53689...
OESA-2026-3024 libnfs security update
Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...
[SECURITY] [DLA 4689-1] libnfs security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4689-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz July 19, 2026 https://wiki.debian.org/LTS -...
Debian dla-4689 : libnfs-dev - security update
The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4689 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4689-1 [email protected]...
OPENSUSE-SU-2026:11246-1 libnfs-devel-6.0.2-1.1 on GA media
These are all security issues fixed in the libnfs-devel-6.0.2-1.1 package on the GA media of openSUSE Tumbleweed...
OESA-2026-2953 libnfs security update
Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...
SUSE SLED15 / SLES15 Security Update : libnfs (SUSE-SU-2026:2760-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:2760-1 advisory. This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NF...
openSUSE 16 Security Update : libnfs (openSUSE-SU-2026:21055-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21055-1 advisory. This update for libnfs fixes the following issue - CVE-2026-53689: integer overflow during a connection to a crafted NFS server bsc1268135. Tenable has...
Security update for libnfs (important)
openSUSE security update: security update for libnfs ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21055-1 Rating: important References: bsc1268135 Cross-References: CVE-2026-53689 CVSS scores: CVE-2026-53689 SUSE : 7.1...