CVE-2017-7895: debian debian_linux

Modified

AliasesRHSA-2017:1715RHSA-2017:1723RHSA-2017:1766+7 more

Published 28-04-2017Last modified 05-08-2024

Vulnerability summary

CVE-2017-7895 is a high (CVSS 10.0) vulnerability in debian debian_linux. EPSS estimates a 10.81% chance of exploitation in the next 30 days, higher than 95.8% of scored vulnerabilities.

Priority

Prioritisesevere

Severe, CVSS 9.8 (NVD); no exploitation reported by the 5 checked sources; EPSS 11% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

10.81%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 4

DLA-993-1 DSA-3886-1 MGASA-2017-0147 MGASA-2017-0148 RHSA-2017:1615 RHSA-2017:1616+6 more

Timeline

28-04-2017
PublishedVulnerability first disclosed.
05-08-2024
Last modifiedVulnerability information updated.

Description

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c.

CVSS metrics

6 scores · 4 sources · 3 versions

v3.19.8v3.06.5v2.010.0

EPSS trend

Probability

10.81%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 10.81% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat34 products

kernel< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-abi-whitelists< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
kernel-bootwrapper< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-573.45.1.el6
kernel-debug< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-debug-debuginfo< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5

kernel-debug-devel< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-debuginfo< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-debuginfo-common< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-debuginfo-common-i686< 0:2.6.32-696.6.3.el6 | < 0:2.6.32-573.45.1.el6
kernel-debuginfo-common-ppc64< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-573.45.1.el6
kernel-debuginfo-common-ppc64le< 0:3.10.0-327.58.1.el7
kernel-debuginfo-common-s390x< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-573.45.1.el6
kernel-debuginfo-common-x86_64< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
kernel-devel< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-doc< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-firmware< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
kernel-headers< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.18-422.el5 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6 | < 0:2.6.18-348.34.1.el5
kernel-kdump< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.18-422.el5 | < 0:2.6.32-573.45.1.el6
kernel-kdump-debuginfo< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.18-422.el5 | < 0:2.6.32-573.45.1.el6
kernel-kdump-devel< 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.18-422.el5 | < 0:2.6.32-573.45.1.el6
kernel-PAE< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-PAE-debuginfo< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-PAE-devel< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-tools< 0:3.10.0-327.58.1.el7
kernel-tools-debuginfo< 0:3.10.0-327.58.1.el7
kernel-tools-libs< 0:3.10.0-327.58.1.el7
kernel-tools-libs-devel< 0:3.10.0-327.58.1.el7
kernel-xen< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-xen-debuginfo< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
kernel-xen-devel< 0:2.6.18-422.el5 | < 0:2.6.18-348.34.1.el5
perf< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
perf-debuginfo< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
python-perf< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6
python-perf-debuginfo< 0:2.6.32-358.81.1.el6 | < 0:2.6.32-696.6.3.el6 | < 0:3.10.0-327.58.1.el7 | < 0:2.6.32-504.62.1.el6 | < 0:2.6.32-431.82.1.el6 | < 0:2.6.32-573.45.1.el6

Show all 34

Ubuntu21 products

linux< 3.13.0-125.174 | < 4.4.0-79.100
linux-aws< 4.4.0-1018.27
linux-azureAll versions (No fix recorded)
linux-azure-6.11All versions (No fix recorded)
linux-azure-fdeAll versions (No fix recorded)

Show all 21

Debian2 products

linux< 4.9.25-1
debian_linuxEOL8.0 | 9.0

Linux1 product

linux_kernel< 3.2.89 | ≥ 3.3, < 3.16.44 | ≥ 3.17.0, < 4.1.40 | ≥ 4.2, < 4.4.67 | ≥ 4.5.0, < 4.9.26 | ≥ 4.10, < 4.10.14

4 vendors · 58 products

References

38 links

access.redhat.com/errata/RHSA-2017:2732Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2017:2412Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1798Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
github.com/torvalds/linux/commit/13bf9fbff0e5e099e2b6f003a0ab8ae145436309X Refsource CONFIRMPatchThird Party Advisory
access.redhat.com/errata/RHSA-2017:1723Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1615Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2017:1647Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2017:1766Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1616Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2017:2429Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory

Show all 38 references

git.kernel.org/pub/…X Refsource CONFIRMPatchThird Party Advisory
www.debian.org/security/2017/dsa-3886Vendor AdvisoryX Refsource DEBIANThird Party Advisory
access.redhat.com/errata/RHSA-2017:2428Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securityfocus.com/bid/98085VDB EntryX Refsource BIDThird Party Advisory
access.redhat.com/errata/RHSA-2017:2472Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2017:1715Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1446103REPORT
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1715.jsonAdvisory
access.redhat.com/security/cve/CVE-2017-7895REPORT
www.cve.org/CVERecord?id=CVE-2017-7895AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2017-7895Advisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1723.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1766.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1798.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2412.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2428.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2429.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2472.jsonAdvisory
ubuntu.com/security/CVE-2017-7895REPORT
ubuntu.com/security/notices/USN-3314-1Advisory
ubuntu.com/security/notices/USN-3312-1Advisory
ubuntu.com/security/notices/USN-3312-2Advisory
ubuntu.com/security/notices/USN-3359-1Advisory
ubuntu.com/security/notices/USN-3361-1Advisory
ubuntu.com/security/notices/USN-3360-1Advisory
ubuntu.com/security/notices/USN-3360-2Advisory
security-tracker.debian.org/tracker/CVE-2017-7895Advisory