BSA-2017-375
21650
04 January 2019
25 August 2017
Closed
Low
7.5
N/A
CVE-2017-7645
Summary Security Advisory ID : BSA-2017-375 Component : NFS Revision : 3.0: Final
The NFS2/3 RPC client could send long arguments to the NFS server. These encoded arguments are stored in an array of memory pages, and accessed using pointer variables. Arbitrarily long arguments could make these pointers point outside the array and cause an out-of-bounds memory access. A remote user or program could use this flaw to crash the kernel, resulting in denial of service.
Products Confirmed Not Vulnerable
No Brocade Fibre Channel technology products from Broadcom are currently known to be affected by this vulnerability.
Revision History
Version | Change | Date |
---|---|---|
1.0 | Initial Publication | August 25, 2017 |
2.0 | Updated to cover Fibre Channel Only | January 4, 2018 |