Linux-nfs

Nfs-utils

5 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2019-3689

  • EPSS 0.34%
  • Veröffentlicht 19.09.2019 14:15:10
  • Zuletzt bearbeitet 21.11.2024 04:42:20

The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory ...

3.3

CVE-2011-1749

  • EPSS 0.16%
  • Veröffentlicht 26.02.2014 15:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this f...

7.5

CVE-2011-2500

  • EPSS 0.62%
  • Veröffentlicht 15.02.2014 14:57:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

3.2

CVE-2013-1923

  • EPSS 0.4%
  • Veröffentlicht 21.01.2014 18:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.

10

CVE-2003-0252

Exploit
  • EPSS 16.11%
  • Veröffentlicht 18.08.2003 04:00:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain ne...