618954 – (CVE-2017-7895) kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests (CVE-2017-7895)

Bug 618954 (CVE-2017-7895) - kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests (CVE-2017-7895)

Summary: kernel: NFSv3 server does not properly handle payload bounds checking of WRIT...

Status:	RESOLVED FIXED

Alias:	CVE-2017-7895

Product:	Gentoo Security
Classification:	Unclassified
Component:	Kernel (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Kernel Security

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2017-05-19 17:04 UTC by GLSAMaker/CVETool Bot
Modified:	2022-03-25 23:05 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description GLSAMaker/CVETool Bot gentoo-dev

2017-05-19 17:04:34 UTC

CVE-2017-7895 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7895):
  The NFSv2 and NFSv3 server implementations in the Linux kernel through
  4.10.13 lack certain checks for the end of a buffer, which allows remote
  attackers to trigger pointer-arithmetic errors or possibly have unspecified
  other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and
  fs/nfsd/nfsxdr.c.

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2017-05-19 17:08:03 UTC

Upstream fix: https://git.kernel.org/linus/13bf9fbff0e5e099e2b6f003a0ab8ae145436309

Present in

>=linux-4.9.26
>=linux-4.4.67

Absent in

linux-4.1
linux-3.12
linux-3.10
linux-3.4

Comment 2 John Helmert III archtester

2022-03-25 23:05:35 UTC

Fix in 4.9.26, 4.11