CVE-2011-4131

Published: May 17, 2012Modified: Apr 29, 2026

4.6

Vector

AV:A/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 3.2 / Impact: 6.9

Source: NVD

Description

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

Affected (8)

Products: Linux: Linux Kernel

1 product

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	Version 3.2.1
Linux Linux Kernel	Version 3.2
Linux Linux Kernel	Version 3.2 rc2
Linux Linux Kernel	Version 3.2 rc3
Linux Linux Kernel	Version 3.2 rc4
Linux Linux Kernel	Version 3.2 rc5
Linux Linux Kernel	Version 3.2 rc6
Linux Linux Kernel	Version 3.2 rc7

Related CWEs

References (22)

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-0862.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2012-1541.html

Source: secalert@redhat.com

http://secunia.com/advisories/48898

Source: secalert@redhat.com

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/11/12/1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=747106

Source: secalert@redhat.com

https://github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f

Source: secalert@redhat.com

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bf118a342f10dafe44b14451a1392c3254629a1f

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081280.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-0862.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2012-1541.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48898

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/11/12/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=747106

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/torvalds/linux/commit/bf118a342f10dafe44b14451a1392c3254629a1f

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.