Summary

Security Advisory ID : BSA-2017-375

Component : NFS

Revision : 3.0: Final

The NFS2/3 RPC client could send long arguments to the NFS server. These encoded arguments are stored in an array of memory pages, and accessed using pointer variables. Arbitrarily long arguments could make these pointers point outside the array and cause an out-of-bounds memory access. A remote user or program could use this flaw to crash the kernel, resulting in denial of service.

Products Confirmed Not Vulnerable

No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.

Revision History