CVE-2017-7895
CriticalSummary
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests.
Risk Assessment
The lack of proper checks may lead to serious system errors, posing a risk to the integrity and availability of NFS services within the organization.
Recommendation
It is recommended to update the Linux kernel to a version that includes fixes for this vulnerability to minimize the risk of attacks.
Original NVD description (English source)
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.