kritisch
CVE-2017-7895
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.
Einstufung nach Quelle
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut Red Hat (hoch), Oracle (hoch), Ubuntu (mittel).
Beschreibung
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | linux, linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux, linux-aws, linux-secure | 4.9.53-3.ph2 und 1 weitere |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel, kernel-PAE, kernel-PAE-devel und 21 weitere | 2.6.18-419.0.0.0.3.el5 und 3 weitere |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek, dtrace-modules-4.1.12-94.3.4.el6uek, kernel und 15 weitere | 0.4.5-3.el6 und 3 weitere |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek, dtrace-modules-4.1.12-94.3.4.el7uek, kernel und 17 weitere | 0.4.5-3.el7 und 3 weitere |
Alle 98 Einträge aus 21 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | linux | 4.4.67-1.ph1 |
| Photon OS 1.0 | linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux | 4.9.53-3.ph2 |
| Photon OS 2.0 | linux-aws | 4.9.193-1.ph2 |
| Photon OS 2.0 | linux-secure | 4.9.53-3.ph2 |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-doc | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-headers | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-uek | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-doc | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-firmware | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-xen | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-xen-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5 | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5PAE | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5debug | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5xen | 1.4.11-1.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5 | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5PAE | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5debug | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5xen | 2.0.5-2.el5 |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek | 0.4.5-3.el6 |
| Oracle Linux 6 | dtrace-modules-4.1.12-94.3.4.el6uek | 0.6.0-4.el6 |
| Oracle Linux 6 | kernel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-abi-whitelists | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-doc | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-firmware | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-headers | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-uek | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-doc | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-firmware | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | python-perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek | 0.4.5-3.el7 |
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.4.el7uek | 0.6.0-4.el7 |
| Oracle Linux 7 | kernel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-abi-whitelists | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-doc | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-headers | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-uek | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-doc | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-firmware | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | perf | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | python-perf | 3.10.0-514.26.1.0.1.el7 |
| root.io debian 11 | rootio-linux | 4.9.25-1 |
| root.io debian 12 | rootio-linux | 4.9.25-1 |
| root.io debian 13 | rootio-linux | 4.9.25-1 |
| ubuntu 14.04 | linux | 3.13.0-125.174 |
| ubuntu 14.04 | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-125.174 |
| ubuntu 14.04-ESM | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 16.04 | linux | 4.4.0-79.100 |
| ubuntu 16.04 | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04 | linux-gke | 4.4.0-1014.14 |
| ubuntu 16.04 | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04 | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.04 | linux-raspi2 | 4.4.0-1057.64 |
| ubuntu 16.04 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 16.04-ESM | linux | 4.4.0-79.100 |
| ubuntu 16.04-ESM | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04-ESM | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.10 | linux | 4.8.0-59.64 |
| ubuntu 16.10 | linux-raspi2 | 4.8.0-1043.47 |
| ubuntu 16.10 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 17.04 | linux | 4.10.0-22.24 |
| ubuntu 17.04 | linux-raspi2 | 4.10.0-1006.8 |
| ubuntu 17.04 | linux-snapdragon | 4.4.0-1059.63 |
Referenzen
- http://www.debian.org/security/2017/dsa-3886
- http://www.securityfocus.com/bid/98085
- https://access.redhat.com/errata/RHSA-2017:1615
- https://access.redhat.com/errata/RHSA-2017:1616
- https://access.redhat.com/errata/RHSA-2017:1647
- https://access.redhat.com/errata/RHSA-2017:1715
- https://access.redhat.com/errata/RHSA-2017:1723
- https://access.redhat.com/errata/RHSA-2017:1766
Alle 28 Referenzen
- https://access.redhat.com/errata/RHSA-2017:1798
- https://access.redhat.com/errata/RHSA-2017:2412
- https://access.redhat.com/errata/RHSA-2017:2428
- https://access.redhat.com/errata/RHSA-2017:2429
- https://access.redhat.com/errata/RHSA-2017:2472
- https://access.redhat.com/errata/RHSA-2017:2732
- https://access.redhat.com/security/cve/CVE-2017-7895
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://linux.oracle.com/cve/CVE-2017-7895.html
- https://linux.oracle.com/errata/ELSA-2017-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-7895
- https://ubuntu.com/security/notices/USN-3312-1
- https://ubuntu.com/security/notices/USN-3312-2
- https://ubuntu.com/security/notices/USN-3314-1
- https://ubuntu.com/security/notices/USN-3359-1
- https://ubuntu.com/security/notices/USN-3360-1
- https://ubuntu.com/security/notices/USN-3360-2
- https://ubuntu.com/security/notices/USN-3361-1
- https://www.cve.org/CVERecord?id=CVE-2017-7895