CVE-2012-2375

Published: 13 June 2012

The __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the NFSv4 implementation in the Linux kernel before 3.3.2 uses an incorrect length variable during a copy operation, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words in an FATTR4_ACL reply. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-4131.

From the Ubuntu Security Team

A flaw was discovered in the Linux kernel's NFSv4 (Network file system) handling of ACLs (access control lists). A remote NFS server (attacker) could cause a denial of service (OOPS).

Notes

linux-armadaxp is maintained by OEM
introduced by fix for CVE-2011-4131

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2375
• http://www.openwall.com/lists/oss-security/2012/05/18/13
• https://ubuntu.com/security/notices/USN-1486-1
• https://ubuntu.com/security/notices/USN-1487-1
• https://ubuntu.com/security/notices/USN-1488-1
• https://ubuntu.com/security/notices/USN-1489-1
• https://ubuntu.com/security/notices/USN-1490-1
• https://ubuntu.com/security/notices/USN-1494-1
• https://ubuntu.com/security/notices/USN-1499-1
• https://ubuntu.com/security/notices/USN-1530-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=822869
• https://launchpad.net/bugs/1002505