NVD

Id
44187  
Name
CVE-2012-2375  
Description
The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-06-13  
Modified Date
2016-08-22  
Seq
2012-2375  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221912 44187 CVE-2012-2375 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=20e0fa98b751facf9a1101edaefbc19c82616a68  View
221913 44187 CVE-2012-2375 HPSBGN02970  View
221914 44187 CVE-2012-2375 RHSA-2012:1580  View
221915 44187 CVE-2012-2375 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.2  View
221916 44187 CVE-2012-2375 [oss-security] 20120518 Re: CVE Request -- kernel: incomplete fix for CVE-2011-4131  View
221917 44187 CVE-2012-2375 https://bugzilla.redhat.com/show_bug.cgi?id=822869  View
221918 44187 CVE-2012-2375 https://github.com/torvalds/linux/commit/20e0fa98b751facf9a1101edaefbc19c82616a68  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27008 JVNDB-2012-002715 Linux Kernel の NFSv4 の実装におけるサービス運用妨害 (OOPS) の脆弱性 Linux Kernel の NFSv4 の実装の fs/nfs/nfs4proc.c 内の __nfs4_get_acl_uncached 関数は、コピー操作の間に不正な長さの変数を使用するため、サービス運用妨害 (OOPS) 状態となる脆弱性が存在します。 CVE-2012-2375 55613 CVE-2012-2375 44187 4.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002715.html 2012-06-13 2012-06-15 View