CVE-2022-26937

CVE-2022-26937 Microsoft NFS 구현의 취약점인 CVE-2022-26937을 탐지하는 패키지입니다. 예제 testing\traces 디렉터리에 포함된 PCAP에서 이 로직을 실행할 수 있습니다: $ zeek -Cr CVE-2022-26937-exploited.pcap /Source/CVE-2022-26937/scripts/load.zeek $ cat notice.log separator \x09 setseparator , emptyfield empty unsetfield - path notice open...

sharesniffer

sharesniffer sharesniffer는 로컬 네트워크에서 열려 있거나 닫힌 파일 공유를 찾는 네트워크 분석 도구입니다. 열려 있는 cifs 및 nfs 공유의 자동 네트워크 검색과 자동 마운트를 포함합니다. 사용 방법 로컬 네트워크에서 열려 있거나 닫힌 nfs/smb 공유가 있는 모든 호스트를 찾는 예: python sharesniffer.py 192.168.56.0/24 네트워크에서 가능한 라우터/방화벽을 제외하고 모든 호스트를 찾고, 열려 있는 nfs/smb 공유를 /mnt에 자동 마운트하는 예: python...

NfSpy

NfSpy - ID 스푸핑 NFS 클라이언트 Daniel Miller 제작 NfSpy는 NFS 공유를 마운트할 때 NFS 자격 증명 위조를 자동화하기 위한 Python 라이브러리입니다. 두 가지 클라이언트 프로그램이 포함되어 있습니다: nfspy 는 Linux에서 NFS 공유를 마운트하기 위해 Filesystem in UserspaceFUSE 라이브러리를 사용합니다. 이를 통해 grep 및 find와 같은 일반적인 파일 검색 및 조작 프로그램을 사용하여 NFS 익스포트를 탐색할 수 있습니다. nfspysh 는 NFS 익스포트를...

CVE-2022-34715-POC

CVE-2022-34715-POC CVE-2022-34715-POC pcap nfssvr.sys 버전 10.0.20348.825 0: kd r rax=0000000080000001 rbx=0000000000000000 rcx=ffffde87fe461150 rdx=0000000000000000 rsi=fffff8040811aa50 rdi=0000000000000008 rip=fffff80408067dbb rsp=ffffb400eb3e2630 rbp=ffffb400eb3e26b9 r8=0000001000000020...

CVE-2022-30136

CVE-2022-30136 Windows Network File System 원격 익스플로잇 PoC 저자: Ricardo Narvaja 데모 목적으로만 사용하십시오. 전체 익스플로잇은 취약한 Windows Server 시스템에서 작동합니다. 분석 문서 확인: Analysis of CVE-2022-30136 “Windows Network File System Vulnerability“. 사용법 CVE-2022-22029 “Windows Network File System 취약점“ 분석 이 글은 Core Impact 익스플로잇...

cve-2026-43687

CVE-2026-43687 — リバースエンジニアリングノートと再現 macOS NFSクライアントのアクセスキャッシュ競合（CVE-2026-43687 ）の独立したリバースエンジニアリングと、その競合を引き起こしdtraceでライブキャプチャする動作するPoC。 このバグはnfsvnopaccessにおけるnfsnodeアクセスキャッシュポインタの非同期読み取りである。悪意のあるNFSv3サーバーは、別のスレッドがアクセスキャッシュを読み取っている間に再割り当てを引き起こすことができ、敵対的サーバーが影響を与えられるカーネルメモリの漏洩を生じさせる。macOS...

Enigm-Writeup

Hack The Box: Enigma - 総合ペネトレーションテスト & ライトアップレポート 1. エグゼクティブサマリー Enigma は、Hack The Box でホストされている中級レベルの Linux マシンです。評価手法は、標準的なペネトレーションテストのライフサイクルに従います。すなわち、偵察、列挙、認証情報の収集による初期アクセス、ローカル列挙、そしてサービス層の脆弱性（OliveTin における CVE-2026-27626 ）を悪用した root...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_21917)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521917 advisory. kernel: NFS: Fix a race when updating an existing write CVE-2025-39697 kernel: i40e: fix idx validation in config queues msg CVE-2025-39971 Tenable has...

Rocky Linux 9 [CIQ] Security Update: libnfsidmap / libnfsidmap-debuginfo / libnfsidmap-devel / nfs-utils / etc (crlsa-2026_3940)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263940 advisory. nfs-utils: rpc.mountd in the nfs-utils privilege escalation CVE-2025-12801 Tenable has extracted the preceding description block directly from the CIQ security...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8851-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8851-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

AlmaLinux 9.6 [TuxCare] Security Update: libnfsidmap / libnfsidmap-devel / nfs-stats-utils / nfs-utils / etc (ALMALINUX9.6:CLSA-2026:1773224214)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773224214 advisory. - A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate...

Ubuntu 20.04 LTS : Linux kernel (BlueField) vulnerabilities (USN-8850-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8850-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_19105)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202519105 advisory. kernel: vsock/virtio: Validate length in packet header before skbput CVE-2025-39718 kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry...

Rocky Linux 9.6 [TuxCare] Security Update: libnfsidmap / libnfsidmap-devel / nfs-stats-utils / nfs-utils / etc (ALMALINUX9.6:CLSA-2026:1773224214)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773224214 advisory. - A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escala...

SUSE CVE-2026-74220

U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadreply function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the...

SUSE CVE-2026-74221

U-Boot before 2026.10-rc5 contains a buffer overflow in nfsreadlinkreply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

USN-8851-1 linux, linux-aws, linux-azure, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

USN-8851-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...

USN-8850-1 linux-bluefield vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - OCFS2 file system; - IPv6 networking; - Netfilter; - SCTP protocol;...

USN-8850-1: Linux kernel (BlueField) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - OCFS2 file system; - IPv6 networking; - Netfilter; - SCTP protocol;...