The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7895.json"
[
{
"target": {
"file": "fs/nfsd/nfs3xdr.c",
"function": "nfs3svc_decode_writeargs"
},
"digest": {
"length": 1198.0,
"function_hash": "140271511831870020715429823013241395511"
},
"signature_type": "Function",
"id": "CVE-2017-7895-3e563f98",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfsxdr.c",
"function": "nfssvc_decode_writeargs"
},
"digest": {
"length": 960.0,
"function_hash": "201459363032396512419225780015280712586"
},
"signature_type": "Function",
"id": "CVE-2017-7895-7b3939d2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfs3xdr.c",
"function": "nfs3svc_decode_symlinkargs"
},
"digest": {
"length": 1018.0,
"function_hash": "283523195579133600897807500020324272187"
},
"signature_type": "Function",
"id": "CVE-2017-7895-b932624b",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfs3xdr.c"
},
"digest": {
"line_hashes": [
"105450322369912012113993855326861779536",
"206945985531292795429717793333595650707",
"277299723619360867719866888237628562662",
"143704748529125222526281173997847825454",
"306811434727122607208338003686247451666",
"38001764806622996863794695518481933721",
"31623502114169500217475993428797495773",
"39648147940055255192786203248379592073"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2017-7895-bbe3e9bf",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfsxdr.c"
},
"digest": {
"line_hashes": [
"45955987533134377517207256554721016700",
"287440635460618764292045351644022102926",
"320781797162689815030430957007499624547",
"153392976367407958767871036493687512106"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2017-7895-e1013f83",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7895.json"
[
{
"target": {
"file": "fs/nfsd/nfs3xdr.c"
},
"digest": {
"line_hashes": [
"105450322369912012113993855326861779536",
"206945985531292795429717793333595650707",
"277299723619360867719866888237628562662",
"143704748529125222526281173997847825454",
"306811434727122607208338003686247451666",
"38001764806622996863794695518481933721",
"31623502114169500217475993428797495773",
"39648147940055255192786203248379592073"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2017-7895-38f5949d",
"source": "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfs3xdr.c",
"function": "nfs3svc_decode_writeargs"
},
"digest": {
"length": 1198.0,
"function_hash": "140271511831870020715429823013241395511"
},
"signature_type": "Function",
"id": "CVE-2017-7895-56f668a6",
"source": "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfsxdr.c",
"function": "nfssvc_decode_writeargs"
},
"digest": {
"length": 960.0,
"function_hash": "201459363032396512419225780015280712586"
},
"signature_type": "Function",
"id": "CVE-2017-7895-b6c1f5e6",
"source": "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfs3xdr.c",
"function": "nfs3svc_decode_symlinkargs"
},
"digest": {
"length": 1018.0,
"function_hash": "283523195579133600897807500020324272187"
},
"signature_type": "Function",
"id": "CVE-2017-7895-e40f73eb",
"source": "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
},
{
"target": {
"file": "fs/nfsd/nfsxdr.c"
},
"digest": {
"line_hashes": [
"45955987533134377517207256554721016700",
"287440635460618764292045351644022102926",
"320781797162689815030430957007499624547",
"153392976367407958767871036493687512106"
],
"threshold": 0.9
},
"signature_type": "Line",
"id": "CVE-2017-7895-e60399e6",
"source": "https://github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309",
"deprecated": false,
"signature_version": "v1"
}
]