Bug 618954 (CVE-2017-7895)

Summary:	kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests (CVE-2017-7895)
Product:	Gentoo Security	Reporter:	GLSAMaker/CVETool Bot <glsamaker>
Component:	Kernel	Assignee:	Gentoo Kernel Security <security-kernel>
Status:	RESOLVED FIXED
Severity:	normal	CC:	kernel
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description GLSAMaker/CVETool Bot gentoo-dev

2017-05-19 17:04:34 UTC

CVE-2017-7895 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2017-7895):
  The NFSv2 and NFSv3 server implementations in the Linux kernel through
  4.10.13 lack certain checks for the end of a buffer, which allows remote
  attackers to trigger pointer-arithmetic errors or possibly have unspecified
  other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and
  fs/nfsd/nfsxdr.c.

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2017-05-19 17:08:03 UTC

Upstream fix: https://git.kernel.org/linus/13bf9fbff0e5e099e2b6f003a0ab8ae145436309

Present in

>=linux-4.9.26
>=linux-4.4.67

Absent in

linux-4.1
linux-3.12
linux-3.10
linux-3.4

Comment 2 John Helmert III archtester

2022-03-25 23:05:35 UTC

Fix in 4.9.26, 4.11