PT-2026-121323

ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs zdr bytes, libnfs zdr string, and libnfs zdr array. The caller-supplied maxsize value is not honored...

PT-2026-110434

Name of the Vulnerable Software and Affected Versions libnfs versions prior to 7613236 Description ZDR decoding in libnfs contains an out-of-bounds write issue within the file lib/libnfs-zdr.c. This occurs because the maxsize value provided by the caller is not honored during the execution of the...

OESA-2026-3025 libnfs security update

Package contains a library of functions for accessing NFSv2 and NFSv3 servers from user space. It provides a low-level,asynchronous RPC library for accessing NFS protocols, an asynchronous library with POSIX-like VFS functions,and a synchronous library with POSIX-like VFS functions. Security Fixe...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in the libnfszdrstring function in lib/libnfs-zdr.c when connecting to a specially crafted NFS server. An attacker can cause an integer overflow and potentially execute arbitrary code o...

libnfs security vulnerabilities

libnfs is a network file system access client library developed by Ronnie Sahlberg. Versions of libnfs prior to 55c18ea contained security vulnerabilities; these vulnerabilities stemmed from unvalidated string sizes, which could lead to integer overflows when connecting to specially crafted NFS...

PT-2026-48450

Name of the Vulnerable Software and Affected Versions libnfs versions prior to 55c18ea Description An integer overflow occurs during a connection to a crafted NFS server because the software does not validate a string size. This issue is located in the libnfs zdr string function within the...