The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 3.2.89 |
| linux / linux_kernel | 3.3 | 3.16.44 |
| linux / linux_kernel | 3.17.0 | 4.1.40 |
| linux / linux_kernel | 4.2 | 4.4.67 |
| linux / linux_kernel | 4.5.0 | 4.9.26 |
| linux / linux_kernel | 4.10 | 4.10.14 |
| debian / debian_linux | 8.0 | 8.0.x |
| debian / debian_linux | 9.0 | 9.0.x |