9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
kernel is vulnerable to arbitrary code execution attacks. The vulnerability exists as the NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
www.debian.org/security/2017/dsa-3886
www.securityfocus.com/bid/98085
access.redhat.com/errata/RHSA-2017:1615
access.redhat.com/errata/RHSA-2017:1616
access.redhat.com/errata/RHSA-2017:1647
access.redhat.com/errata/RHSA-2017:1715
access.redhat.com/errata/RHSA-2017:1723
access.redhat.com/errata/RHSA-2017:1766
access.redhat.com/errata/RHSA-2017:1798
access.redhat.com/errata/RHSA-2017:2412
access.redhat.com/errata/RHSA-2017:2428
access.redhat.com/errata/RHSA-2017:2429
access.redhat.com/errata/RHSA-2017:2472
access.redhat.com/errata/RHSA-2017:2732
access.redhat.com/security/updates/classification/#important
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309
github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C