Lucene search

K
cvelistMitreCVELIST:CVE-2017-7895
HistoryApr 28, 2017 - 10:00 a.m.

CVE-2017-7895

2017-04-2810:00:00
mitre
www.cve.org
1

9.8 High

AI Score

Confidence

High

0.905 High

EPSS

Percentile

98.8%

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.