PT-2012-1860
CVE-2011-4324
·
تاريخ النشر
2012-01-10
·
تاريخ التحديث
2023-02-13
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 2.6.29
Description
The issue allows local users to cause a denial of service, resulting in a system crash, by utilizing the mknod system call with a pathname on an NFSv4 filesystem. This is due to a problem in the encode share access function in fs/nfs/nfs4xdr.c.
Recommendations
For versions prior to 2.6.29, update to version 2.6.29 or later to resolve the issue. As a temporary workaround, consider restricting access to the mknod system call on NFSv4 filesystems to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾