CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
97.9%
Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl.
Vendor | Product | Version | CPE |
---|---|---|---|
linux | linux_kernel | 2.6.18 | cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.19.4 | cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.19.5 | cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.19.7 | cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.16 | cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.17 | cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.18 | cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.19 | cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.20 | cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:* |
linux | linux_kernel | 2.6.20.21 | cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:* |
git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=91b80969ba466ba4b915a4a1d03add8c297add3f
lkml.org/lkml/2008/9/3/286
secunia.com/advisories/31881
secunia.com/advisories/32190
secunia.com/advisories/32393
www.debian.org/security/2008/dsa-1636
www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.26.4
www.openwall.com/lists/oss-security/2008/09/04/18
www.openwall.com/lists/oss-security/2008/09/04/4
www.redhat.com/support/errata/RHSA-2008-0857.html
www.securityfocus.com/bid/31133
www.ubuntu.com/usn/usn-659-1
bugzilla.redhat.com/show_bug.cgi?id=461101
exchange.xforce.ibmcloud.com/vulnerabilities/45055