critique
CVE-2017-7895
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Le label propre à Trivy est CRITICAL. Critique selon NVD, Photon OS. Plus basse selon Red Hat (élevée), Oracle (élevée), Ubuntu (moyenne).
Description
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 1.0 | linux, linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux, linux-aws, linux-secure | 4.9.53-3.ph2 et 1 autres |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel, kernel-PAE, kernel-PAE-devel et 21 autres | 2.6.18-419.0.0.0.3.el5 et 3 autres |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek, dtrace-modules-4.1.12-94.3.4.el6uek, kernel et 15 autres | 0.4.5-3.el6 et 3 autres |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek, dtrace-modules-4.1.12-94.3.4.el7uek, kernel et 17 autres | 0.4.5-3.el7 et 3 autres |
Afficher les 98 entrées de 21 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 1.0 | linux | 4.4.67-1.ph1 |
| Photon OS 1.0 | linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux | 4.9.53-3.ph2 |
| Photon OS 2.0 | linux-aws | 4.9.193-1.ph2 |
| Photon OS 2.0 | linux-secure | 4.9.53-3.ph2 |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-doc | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-headers | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-uek | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-doc | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-firmware | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-xen | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-xen-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5 | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5PAE | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5debug | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5xen | 1.4.11-1.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5 | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5PAE | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5debug | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5xen | 2.0.5-2.el5 |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek | 0.4.5-3.el6 |
| Oracle Linux 6 | dtrace-modules-4.1.12-94.3.4.el6uek | 0.6.0-4.el6 |
| Oracle Linux 6 | kernel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-abi-whitelists | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-doc | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-firmware | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-headers | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-uek | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-doc | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-firmware | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | python-perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek | 0.4.5-3.el7 |
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.4.el7uek | 0.6.0-4.el7 |
| Oracle Linux 7 | kernel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-abi-whitelists | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-doc | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-headers | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-uek | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-doc | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-firmware | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | perf | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | python-perf | 3.10.0-514.26.1.0.1.el7 |
| root.io debian 11 | rootio-linux | 4.9.25-1 |
| root.io debian 12 | rootio-linux | 4.9.25-1 |
| root.io debian 13 | rootio-linux | 4.9.25-1 |
| ubuntu 14.04 | linux | 3.13.0-125.174 |
| ubuntu 14.04 | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-125.174 |
| ubuntu 14.04-ESM | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 16.04 | linux | 4.4.0-79.100 |
| ubuntu 16.04 | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04 | linux-gke | 4.4.0-1014.14 |
| ubuntu 16.04 | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04 | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.04 | linux-raspi2 | 4.4.0-1057.64 |
| ubuntu 16.04 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 16.04-ESM | linux | 4.4.0-79.100 |
| ubuntu 16.04-ESM | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04-ESM | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.10 | linux | 4.8.0-59.64 |
| ubuntu 16.10 | linux-raspi2 | 4.8.0-1043.47 |
| ubuntu 16.10 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 17.04 | linux | 4.10.0-22.24 |
| ubuntu 17.04 | linux-raspi2 | 4.10.0-1006.8 |
| ubuntu 17.04 | linux-snapdragon | 4.4.0-1059.63 |
Références
- http://www.debian.org/security/2017/dsa-3886
- http://www.securityfocus.com/bid/98085
- https://access.redhat.com/errata/RHSA-2017:1615
- https://access.redhat.com/errata/RHSA-2017:1616
- https://access.redhat.com/errata/RHSA-2017:1647
- https://access.redhat.com/errata/RHSA-2017:1715
- https://access.redhat.com/errata/RHSA-2017:1723
- https://access.redhat.com/errata/RHSA-2017:1766
Les 28 références
- https://access.redhat.com/errata/RHSA-2017:1798
- https://access.redhat.com/errata/RHSA-2017:2412
- https://access.redhat.com/errata/RHSA-2017:2428
- https://access.redhat.com/errata/RHSA-2017:2429
- https://access.redhat.com/errata/RHSA-2017:2472
- https://access.redhat.com/errata/RHSA-2017:2732
- https://access.redhat.com/security/cve/CVE-2017-7895
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://linux.oracle.com/cve/CVE-2017-7895.html
- https://linux.oracle.com/errata/ELSA-2017-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-7895
- https://ubuntu.com/security/notices/USN-3312-1
- https://ubuntu.com/security/notices/USN-3312-2
- https://ubuntu.com/security/notices/USN-3314-1
- https://ubuntu.com/security/notices/USN-3359-1
- https://ubuntu.com/security/notices/USN-3360-1
- https://ubuntu.com/security/notices/USN-3360-2
- https://ubuntu.com/security/notices/USN-3361-1
- https://www.cve.org/CVERecord?id=CVE-2017-7895