Approved changes feed: RSS · Atom
cpe:2.3:a:linux-nfs:nfs-utils:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Linux Nfs (2bc7fc65-b2b7-5713-9fbe-ef2709a4ddfe) |
|---|---|
| Product | Nfs Utils (5869828f-8a8b-5db8-9d79-84f22678ffab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082017 |
pkg:deb/ubuntu/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082020 |
pkg:github/delphix/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082022 |
pkg:github/stefanha/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082025 |
pkg:rpm/centos/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082028 |
pkg:rpm/fedora/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082030 |
pkg:rpm/opensuse/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082033 |
pkg:sourceforge/nfs |
purl2cpe | 2026-06-01 10:16:27.082035 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-12801 |
vulnerable | 2026-06-08 07:04:31.006086 |
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
MEDIUM (6.5)
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the
privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.
Published: 2026-03-04T15:25:53.403Z
Updated: 2026-11-05T14:16:51.631Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.