Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jian Li

Researcher fromRed Hat
#50614of 53,632
4.6Total CVSS
Vulnerabilities · 1
PT-2012-3993
4.6
2012-06-13
Linux · Linux Kernel · CVE-2012-2375
**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 3.3.2 **Description** The issue is related to the nfs4 get acl uncached function in the NFSv4 implementation, which uses an incorrect length variable during a copy operation. This allows remote NFS servers to cause a denial of service by sending an excessive number of bitmap words in an FATTR4 ACL reply. The problem exists because of an incomplete fix for a previous issue. **Recommendations** For versions prior to 3.3.2, update to version 3.3.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ` nfs4 get acl uncached` function in the `fs/nfs/nfs4proc.c` file until a patch is available.