crítica
CVE-2017-7895
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
En la Trivy database desde, como mínimo, el 24 oct 2026, 07:11 UTCNo consta cuándo entró antes de ese build.
Severidad por fuente
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Photon OS. Más baja según Red Hat (alta), Oracle (alta), Ubuntu (media).
Descripción
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 1.0 | linux, linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux, linux-aws, linux-secure | 4.9.53-3.ph2 y 1 más |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel, kernel-PAE, kernel-PAE-devel y 21 más | 2.6.18-419.0.0.0.3.el5 y 3 más |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek, dtrace-modules-4.1.12-94.3.4.el6uek, kernel y 15 más | 0.4.5-3.el6 y 3 más |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek, dtrace-modules-4.1.12-94.3.4.el7uek, kernel y 17 más | 0.4.5-3.el7 y 3 más |
Mostrar las 98 entradas de 21 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Photon OS 1.0 | linux | 4.4.67-1.ph1 |
| Photon OS 1.0 | linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux | 4.9.53-3.ph2 |
| Photon OS 2.0 | linux-aws | 4.9.193-1.ph2 |
| Photon OS 2.0 | linux-secure | 4.9.53-3.ph2 |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-doc | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-headers | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-uek | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-doc | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-firmware | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-xen | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-xen-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5 | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5PAE | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5debug | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5xen | 1.4.11-1.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5 | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5PAE | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5debug | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5xen | 2.0.5-2.el5 |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek | 0.4.5-3.el6 |
| Oracle Linux 6 | dtrace-modules-4.1.12-94.3.4.el6uek | 0.6.0-4.el6 |
| Oracle Linux 6 | kernel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-abi-whitelists | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-doc | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-firmware | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-headers | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-uek | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-doc | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-firmware | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | python-perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek | 0.4.5-3.el7 |
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.4.el7uek | 0.6.0-4.el7 |
| Oracle Linux 7 | kernel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-abi-whitelists | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-doc | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-headers | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-uek | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-doc | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-firmware | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | perf | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | python-perf | 3.10.0-514.26.1.0.1.el7 |
| root.io debian 11 | rootio-linux | 4.9.25-1 |
| root.io debian 12 | rootio-linux | 4.9.25-1 |
| root.io debian 13 | rootio-linux | 4.9.25-1 |
| ubuntu 14.04 | linux | 3.13.0-125.174 |
| ubuntu 14.04 | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-125.174 |
| ubuntu 14.04-ESM | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 16.04 | linux | 4.4.0-79.100 |
| ubuntu 16.04 | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04 | linux-gke | 4.4.0-1014.14 |
| ubuntu 16.04 | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04 | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.04 | linux-raspi2 | 4.4.0-1057.64 |
| ubuntu 16.04 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 16.04-ESM | linux | 4.4.0-79.100 |
| ubuntu 16.04-ESM | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04-ESM | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.10 | linux | 4.8.0-59.64 |
| ubuntu 16.10 | linux-raspi2 | 4.8.0-1043.47 |
| ubuntu 16.10 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 17.04 | linux | 4.10.0-22.24 |
| ubuntu 17.04 | linux-raspi2 | 4.10.0-1006.8 |
| ubuntu 17.04 | linux-snapdragon | 4.4.0-1059.63 |
Referencias
- http://www.debian.org/security/2017/dsa-3886
- http://www.securityfocus.com/bid/98085
- https://access.redhat.com/errata/RHSA-2017:1615
- https://access.redhat.com/errata/RHSA-2017:1616
- https://access.redhat.com/errata/RHSA-2017:1647
- https://access.redhat.com/errata/RHSA-2017:1715
- https://access.redhat.com/errata/RHSA-2017:1723
- https://access.redhat.com/errata/RHSA-2017:1766
Las 28 referencias
- https://access.redhat.com/errata/RHSA-2017:1798
- https://access.redhat.com/errata/RHSA-2017:2412
- https://access.redhat.com/errata/RHSA-2017:2428
- https://access.redhat.com/errata/RHSA-2017:2429
- https://access.redhat.com/errata/RHSA-2017:2472
- https://access.redhat.com/errata/RHSA-2017:2732
- https://access.redhat.com/security/cve/CVE-2017-7895
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://linux.oracle.com/cve/CVE-2017-7895.html
- https://linux.oracle.com/errata/ELSA-2017-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-7895
- https://ubuntu.com/security/notices/USN-3312-1
- https://ubuntu.com/security/notices/USN-3312-2
- https://ubuntu.com/security/notices/USN-3314-1
- https://ubuntu.com/security/notices/USN-3359-1
- https://ubuntu.com/security/notices/USN-3360-1
- https://ubuntu.com/security/notices/USN-3360-2
- https://ubuntu.com/security/notices/USN-3361-1
- https://www.cve.org/CVERecord?id=CVE-2017-7895