CVE-2017-7895

HIGH

Description

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

References

http://www.debian.org/security/2017/dsa-3886

http://www.securityfocus.com/bid/98085

https://access.redhat.com/errata/RHSA-2017:1615

https://access.redhat.com/errata/RHSA-2017:1616

https://access.redhat.com/errata/RHSA-2017:1647

https://access.redhat.com/errata/RHSA-2017:1715

https://access.redhat.com/errata/RHSA-2017:1723

https://access.redhat.com/errata/RHSA-2017:1766

https://access.redhat.com/errata/RHSA-2017:1798

https://access.redhat.com/errata/RHSA-2017:2412

https://access.redhat.com/errata/RHSA-2017:2428

https://access.redhat.com/errata/RHSA-2017:2429

https://access.redhat.com/errata/RHSA-2017:2472

https://access.redhat.com/errata/RHSA-2017:2732

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309

https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309

Details

Source: MITRE

Published: 2017-04-28

Updated: 2018-01-05

Type: CWE-189

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH

CVSS v3.0

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 3.9

Severity: CRITICAL

Tenable Plugins

View all (48 total)

ID	Name	Product	Family	Severity
127325	NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0099)	Nessus	NewStart CGSL Local Security Checks	critical
124974	EulerOS Virtualization for ARM 64 3.0.1.0 : kernel (EulerOS-SA-2019-1521)	Nessus	Huawei Local Security Checks	critical
124827	EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1504)	Nessus	Huawei Local Security Checks	critical
106469	OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0015) (BlueBorne) (Meltdown) (Spectre) (Stack Clash)	Nessus	OracleVM Local Security Checks	critical
103243	RHEL 6 : kernel (RHSA-2017:2732) (BlueBorne)	Nessus	Red Hat Local Security Checks	critical
102774	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0145) (Stack Clash)	Nessus	OracleVM Local Security Checks	critical
102773	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3609) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
102511	Oracle Linux 7 : kernel (ELSA-2017-1842-1) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
102305	RHEL 6 : kernel (RHSA-2017:2429)	Nessus	Red Hat Local Security Checks	critical
102304	RHEL 6 : kernel (RHSA-2017:2428)	Nessus	Red Hat Local Security Checks	critical
102159	RHEL 5 : kernel (RHSA-2017:2412)	Nessus	Red Hat Local Security Checks	critical
102064	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0126) (Stack Clash)	Nessus	OracleVM Local Security Checks	critical
102059	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3595) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
101939	RHEL 6 : kernel (RHSA-2017:1798)	Nessus	Red Hat Local Security Checks	critical
101929	Ubuntu 16.04 LTS : linux-hwe vulnerabilities (USN-3361-1)	Nessus	Ubuntu Local Security Checks	critical
101928	Ubuntu 14.04 LTS : linux vulnerabilities (USN-3360-1)	Nessus	Ubuntu Local Security Checks	critical
101894	Ubuntu 16.10 : linux, linux-raspi2 vulnerabilities (USN-3359-1)	Nessus	Ubuntu Local Security Checks	critical
101799	RHEL 7 : kernel (RHSA-2017:1766)	Nessus	Red Hat Local Security Checks	critical
101489	CentOS 6 : kernel (CESA-2017:1723)	Nessus	CentOS Local Security Checks	critical
101388	Scientific Linux Security Update : kernel on SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	critical
101386	RHEL 6 : kernel (RHSA-2017:1723)	Nessus	Red Hat Local Security Checks	critical
101384	RHEL 6 : kernel (RHSA-2017:1715)	Nessus	Red Hat Local Security Checks	critical
101383	Oracle Linux 6 : kernel (ELSA-2017-1723)	Nessus	Oracle Linux Local Security Checks	critical
101200	OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0121)	Nessus	OracleVM Local Security Checks	critical
101139	Oracle Linux 7 : kernel (ELSA-2017-1615)	Nessus	Oracle Linux Local Security Checks	critical
101138	Oracle Linux 7 : kernel (ELSA-2017-1615-1) (Stack Clash)	Nessus	Oracle Linux Local Security Checks	critical
101120	CentOS 7 : kernel (CESA-2017:1615)	Nessus	CentOS Local Security Checks	critical
101105	Scientific Linux Security Update : kernel on SL7.x x86_64	Nessus	Scientific Linux Local Security Checks	critical
101103	RHEL 6 : MRG (RHSA-2017:1647) (Stack Clash)	Nessus	Red Hat Local Security Checks	critical
101102	RHEL 7 : kernel-rt (RHSA-2017:1616) (Stack Clash)	Nessus	Red Hat Local Security Checks	critical
101101	RHEL 7 : kernel (RHSA-2017:1615)	Nessus	Red Hat Local Security Checks	critical
100877	Debian DSA-3886-1 : linux - security update (Stack Clash)	Nessus	Debian Local Security Checks	critical
100876	Debian DLA-993-2 : linux regression update (Stack Clash)	Nessus	Debian Local Security Checks	critical
100668	Ubuntu 17.04 : linux, linux-raspi2 vulnerabilities (USN-3314-1)	Nessus	Ubuntu Local Security Checks	critical
100665	Ubuntu 14.04 LTS : linux-lts-xenial vulnerabilities (USN-3312-2)	Nessus	Ubuntu Local Security Checks	critical
100664	Ubuntu 16.04 LTS : linux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon vulnerabilities (USN-3312-1)	Nessus	Ubuntu Local Security Checks	critical
100598	Virtuozzo 7 : readykernel-patch (VZA-2017-042)	Nessus	Virtuozzo Local Security Checks	critical
100466	Virtuozzo 7 : readykernel-patch (VZA-2017-038)	Nessus	Virtuozzo Local Security Checks	critical
100451	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3576)	Nessus	Oracle Linux Local Security Checks	critical
100238	OracleVM 3.2 : Unbreakable / etc (OVMSA-2017-0106)	Nessus	OracleVM Local Security Checks	critical
100237	OracleVM 3.3 : Unbreakable / etc (OVMSA-2017-0105)	Nessus	OracleVM Local Security Checks	critical
100236	OracleVM 3.4 : Unbreakable / etc (OVMSA-2017-0104)	Nessus	OracleVM Local Security Checks	critical
100235	Oracle Linux 6 : Unbreakable Enterprise kernel (ELSA-2017-3567)	Nessus	Oracle Linux Local Security Checks	critical
100234	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3566)	Nessus	Oracle Linux Local Security Checks	critical
100233	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2017-3565)	Nessus	Oracle Linux Local Security Checks	critical
100132	Virtuozzo 6 : parallels-server-bm-release / vzkernel / etc (VZA-2017-037)	Nessus	Virtuozzo Local Security Checks	critical
100080	Fedora 25 : kernel (2017-b9b1ac0d15)	Nessus	Fedora Local Security Checks	critical
100078	Fedora 24 : kernel (2017-ad045f80ac)	Nessus	Fedora Local Security Checks	critical