4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
73.4%
Problem Description:
While parsing the exports(5) table, a network mask in the form of
“-network=netname/prefixlength” results in an incorrect network mask
being computed if the prefix length is not a multiple of 8.
For example, specifying the ACL for an export as “-network
192.0.2.0/23” would result in a netmask of 255.255.127.0 being used
instead of the correct netmask of 255.255.254.0.