Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Jian Li

Pesquisador deRed Hat
#50481de 53,638
4.6CVSS total
Vulnerabilidades · 1
PT-2012-3993
4.6
2012-06-13
Linux · Linux Kernel · CVE-2012-2375
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.3.2 **Description** The issue is related to the nfs4 get acl uncached function in the NFSv4 implementation, which uses an incorrect length variable during a copy operation. This allows remote NFS servers to cause a denial of service by sending an excessive number of bitmap words in an FATTR4 ACL reply. The problem exists because of an incomplete fix for a previous issue. **Recommendations** For versions prior to 3.3.2, update to version 3.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ` nfs4 get acl uncached` function in the `fs/nfs/nfs4proc.c` file until a patch is available.