critical
CVE-2017-7895
kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.5CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (high), Oracle (high), Ubuntu (medium).
Description
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | linux, linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux, linux-aws, linux-secure | 4.9.53-3.ph2 and 1 more |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel, kernel-PAE, kernel-PAE-devel and 21 more | 2.6.18-419.0.0.0.3.el5 and 3 more |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek, dtrace-modules-4.1.12-94.3.4.el6uek, kernel and 15 more | 0.4.5-3.el6 and 3 more |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek, dtrace-modules-4.1.12-94.3.4.el7uek, kernel and 17 more | 0.4.5-3.el7 and 3 more |
Show all 98 entries from 21 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | linux | 4.4.67-1.ph1 |
| Photon OS 1.0 | linux-esx | 4.4.67-1.ph1 |
| Photon OS 2.0 | linux | 4.9.53-3.ph2 |
| Photon OS 2.0 | linux-aws | 4.9.193-1.ph2 |
| Photon OS 2.0 | linux-secure | 4.9.53-3.ph2 |
| debian 11 | linux | 4.9.25-1 |
| debian 12 | linux | 4.9.25-1 |
| debian 13 | linux | 4.9.25-1 |
| debian 14 | linux | 4.9.25-1 |
| debian 7 | linux | 3.2.89-1 |
| debian 8 | linux | 3.16.43-2+deb8u1 |
| echo | linux | 4.9.25-1 |
| Oracle Linux 5 | kernel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-PAE-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-debug-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-doc | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-headers | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-uek | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-debug-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-devel | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-doc | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-uek-firmware | 2.6.39-400.296.2.el5uek |
| Oracle Linux 5 | kernel-xen | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | kernel-xen-devel | 2.6.18-419.0.0.0.3.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5 | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5PAE | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5debug | 1.4.11-1.el5 |
| Oracle Linux 5 | ocfs2-2.6.18-419.0.0.0.3.el5xen | 1.4.11-1.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5 | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5PAE | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5debug | 2.0.5-2.el5 |
| Oracle Linux 5 | oracleasm-2.6.18-419.0.0.0.3.el5xen | 2.0.5-2.el5 |
| Oracle Linux 6 | dtrace-modules-3.8.13-118.18.2.el6uek | 0.4.5-3.el6 |
| Oracle Linux 6 | dtrace-modules-4.1.12-94.3.4.el6uek | 0.6.0-4.el6 |
| Oracle Linux 6 | kernel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-abi-whitelists | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-debug-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-devel | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-doc | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-firmware | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-headers | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | kernel-uek | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-debug-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-devel | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-doc | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | kernel-uek-firmware | 4.1.12-94.3.4.el6uek |
| Oracle Linux 6 | perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 6 | python-perf | 2.6.32-696.6.3.el6 |
| Oracle Linux 7 | dtrace-modules-3.8.13-118.18.2.el7uek | 0.4.5-3.el7 |
| Oracle Linux 7 | dtrace-modules-4.1.12-94.3.4.el7uek | 0.6.0-4.el7 |
| Oracle Linux 7 | kernel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-abi-whitelists | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-debug-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-doc | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-headers | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-tools-libs-devel | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | kernel-uek | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-debug-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-devel | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-doc | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | kernel-uek-firmware | 4.1.12-94.3.4.el7uek |
| Oracle Linux 7 | perf | 3.10.0-514.26.1.0.1.el7 |
| Oracle Linux 7 | python-perf | 3.10.0-514.26.1.0.1.el7 |
| root.io debian 11 | rootio-linux | 4.9.25-1 |
| root.io debian 12 | rootio-linux | 4.9.25-1 |
| root.io debian 13 | rootio-linux | 4.9.25-1 |
| ubuntu 14.04 | linux | 3.13.0-125.174 |
| ubuntu 14.04 | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 14.04-ESM | linux | 3.13.0-125.174 |
| ubuntu 14.04-ESM | linux-lts-xenial | 4.4.0-79.100~14.04.1 |
| ubuntu 16.04 | linux | 4.4.0-79.100 |
| ubuntu 16.04 | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04 | linux-gke | 4.4.0-1014.14 |
| ubuntu 16.04 | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04 | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.04 | linux-raspi2 | 4.4.0-1057.64 |
| ubuntu 16.04 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 16.04-ESM | linux | 4.4.0-79.100 |
| ubuntu 16.04-ESM | linux-aws | 4.4.0-1018.27 |
| ubuntu 16.04-ESM | linux-hwe | 4.10.0-32.36~16.04.1 |
| ubuntu 16.04-ESM | linux-hwe-edge | 4.10.0-27.30~16.04.2 |
| ubuntu 16.10 | linux | 4.8.0-59.64 |
| ubuntu 16.10 | linux-raspi2 | 4.8.0-1043.47 |
| ubuntu 16.10 | linux-snapdragon | 4.4.0-1059.63 |
| ubuntu 17.04 | linux | 4.10.0-22.24 |
| ubuntu 17.04 | linux-raspi2 | 4.10.0-1006.8 |
| ubuntu 17.04 | linux-snapdragon | 4.4.0-1059.63 |
References
- http://www.debian.org/security/2017/dsa-3886
- http://www.securityfocus.com/bid/98085
- https://access.redhat.com/errata/RHSA-2017:1615
- https://access.redhat.com/errata/RHSA-2017:1616
- https://access.redhat.com/errata/RHSA-2017:1647
- https://access.redhat.com/errata/RHSA-2017:1715
- https://access.redhat.com/errata/RHSA-2017:1723
- https://access.redhat.com/errata/RHSA-2017:1766
All 28 references
- https://access.redhat.com/errata/RHSA-2017:1798
- https://access.redhat.com/errata/RHSA-2017:2412
- https://access.redhat.com/errata/RHSA-2017:2428
- https://access.redhat.com/errata/RHSA-2017:2429
- https://access.redhat.com/errata/RHSA-2017:2472
- https://access.redhat.com/errata/RHSA-2017:2732
- https://access.redhat.com/security/cve/CVE-2017-7895
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309
- https://linux.oracle.com/cve/CVE-2017-7895.html
- https://linux.oracle.com/errata/ELSA-2017-3576.html
- https://nvd.nist.gov/vuln/detail/CVE-2017-7895
- https://ubuntu.com/security/notices/USN-3312-1
- https://ubuntu.com/security/notices/USN-3312-2
- https://ubuntu.com/security/notices/USN-3314-1
- https://ubuntu.com/security/notices/USN-3359-1
- https://ubuntu.com/security/notices/USN-3360-1
- https://ubuntu.com/security/notices/USN-3360-2
- https://ubuntu.com/security/notices/USN-3361-1
- https://www.cve.org/CVERecord?id=CVE-2017-7895