CVE-2017-7895

—

CVSS 3.1

9.8 critical

EPSS

11%p96

Published

Apr 28, 2017 (Apr 28, 2017)

Modified

Jun 17, 2026

Description

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

Vendors: linux debian
Products: linux kernel, debian linux
Weakness: CWE-119
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (10.8%)

In the news0 stories

No ingested article mentions this CVE yet.