CVE-2011-4131

Severity

46%

Complexity

32%

Confidentiality

115%

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

CVSS 2.0 Base Score 4.6. CVSS Attack Vector: adjacent_network. CVSS Attack Complexity: high. CVSS Vector: (AV:A/AC:H/Au:N/C:N/I:N/A:C).

Overview

First reported 12 years ago

2012-05-17 11:00:00

Last updated 7 years ago

2017-12-29 02:29:00

Affected Software

Linux Kernel 3.2

3.2

Linux Kernel 3.2 release candidate 2

3.2

Linux Kernel 3.2 release candidate 3

3.2

Linux Kernel 3.2 release candidate 4

3.2

Linux Kernel 3.2 release candidate 5

3.2

Linux Kernel 3.2 release candidate 6

3.2

Linux Kernel 3.2 release candidate 7

3.2

Linux Kernel 3.2.1

3.2.1

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bf118a342f10dafe44b14451a1392c3254629a1f

FEDORA-2012-8359

SUSE-SU-2012:0554

openSUSE-SU-2013:0925

RHSA-2012:0862

RHSA-2012:1541

48898

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2

[oss-security] 20111111 Re: CVE Request -- kernel: nfs4_getfacl decoding kernel oops

https://bugzilla.redhat.com/show_bug.cgi?id=747106

https://github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.