Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2012-2375

CVE information

Published

10 years ago

Last Modified

1 month ago

CVSSv2.0 Severity

Medium

Impact Analysis

Share

Description

The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131..

CVSSv2.0 Score

Severity
Medium
Base Score
4.6/10
Exploit Score
3.2/10
Access Vector
Adjacent_network
Access Complexity
High
Authentication Required
None
Impact Score
6.9/10
Confidentiality Impact
None
Availability Impact
Complete
Integrity Impact
None

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:o:linux:linux_kernel:3.3:rc4:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc5:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc3:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc2:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc6:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc1:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:o:linux:linux_kernel:3.3:rc7:*:*:*:*:*:*
  Yes
- -

References