kernel: TOCTOU mismatch in the NFS client code

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation...

PT-2021-2043 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue is related to insufficient input validation in the Network File System NFS of Windows operating systems. This can be exploited by a remote attacker to cause a denial...

CVE-2020-11920

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section of the NFS settings menu in the webserver running on the device. By injecting Bash commands via shell metacharacters here, the device executes arbitrary code...

Svakom Siime Eye Operating System Command Injection Vulnerability

The Svakom Siime Eye is a smart home device from Svakom, USA. An operating system command injection vulnerability exists in Svakom Siime Eye. The vulnerability stems from a command injection issue in the HOST/IP section of the NFS settings menu of the web server running on the device. Arbitrary...

kernel: Nfsd failure to clear umask after processing an open or create

A flaw incorrect umask during file or directory modification in the Linux kernel NFS network file system functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with...

kernel: Nfsd failure to clear umask after processing an open or create

A flaw incorrect umask during file or directory modification in the Linux kernel NFS network file system functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with...

Apple NetFSFramework Code Issue Vulnerability

Apple NetFSFramework is a component of Apple Inc. that is used in Apple devices to support the network file system. A code issue exists in Apple NetFSFramework, which is a vulnerability that arises from an application not properly applying security restrictions within the NetFSFramework component...

Vulnerability fixed in Linux kernel

A vulnerability has been fixed in the Linux kernel. A malicious party can exploit the vulnerability to obtain sensitive information via a "path traversal" attack that allows security measures can be bypassed. The vulnerability can only be exploited when the target system provides a file system to...

CVE-2020-35513

A flaw incorrect umask during file or directory modification in the Linux kernel NFS network file system functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with...

UBUNTU-CVE-2020-35513

A flaw incorrect umask during file or directory modification in the Linux kernel NFS network file system functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with...

Linux Kernel NFS Security Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security flaw exists in the Linux Kernel NFS version 4.2. An attacker may be able to exploit this flaw to starve a device of resources, leading to a denial of service...

UBUNTU-CVE-2021-3178

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attac...

The vulnerability of the skb_to_mamac function in the MostCore driver of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the skbtomamac function in the network.c file of the MostCore operating system driver is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Network File System (NFS) on Linux operating systems, which allows attackers to increase their privileges

The vulnerability of the Network File System NFS on Linux operating systems is related to a validation error. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

kernel: umask not applied on filesystem without ACL support

A vulnerability was found in NFSv4.2 in the Linux kernel, where a server fails to correctly apply umask when creating a new object on filesystem without ACL support for example, ext4 with the "noacl" mount option. This flaw allows a local attacker with a user privilege to cause a kernel informati...

kernel: TOCTOU mismatch in the NFS client code

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation...

kernel: TOCTOU mismatch in the NFS client code

A flaw was found in the NFSv4 implementation where when mounting a remote attacker controlled server it could return specially crafted response allow for local memory corruption and possibly privilege escalation...

The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Network File System NFS on Windows operating systems relates to operations that occur outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft Windows Network File System Denial of Service (CVE-2020-17047)

A denial of service vulnerability has been reported in Windows Network File System. The vulnerability is due to improper handling of crafted RPC packets. A remote attacker can exploit this vulnerability by sending malicious RPC calls to a targe server...

Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66066)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A denial-of-service vulnerability exists in the Microsoft Windows/Windows Server...