Approved changes feed: RSS · Atom
cpe:2.3:a:linux-nfs:nfs-utils:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Linux Nfs (2bc7fc65-b2b7-5713-9fbe-ef2709a4ddfe) |
|---|---|
| Product | Nfs Utils (5869828f-8a8b-5db8-9d79-84f22678ffab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082015 |
pkg:deb/ubuntu/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082018 |
pkg:github/delphix/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082021 |
pkg:github/stefanha/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082024 |
pkg:rpm/centos/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082026 |
pkg:rpm/fedora/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082029 |
pkg:rpm/opensuse/nfs-utils |
purl2cpe | 2026-06-01 10:16:27.082031 |
pkg:sourceforge/nfs |
purl2cpe | 2026-06-01 10:16:27.082034 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3689 |
vulnerable | 2026-06-08 05:13:55.341584 |
nfs-utils: root-owned files stored in insecure /var/lib/nfs directory
MEDIUM (5.1)
The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains files owned and managed by root. If statd is compromised, it can therefore trick processes running with root privileges into creating/overwriting files anywhere on the system.
Published: 2019-09-19T13:27:58.449Z
Updated: 2024-09-17T04:14:20.947Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1923 |
vulnerable | 2026-06-08 05:03:57.288689 |
Details available
rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.
Published: 2014-01-21T18:00:00.000Z
Updated: 2024-08-06T15:20:36.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2500 |
vulnerable | 2026-06-08 04:58:07.264252 |
Details available
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.
Published: 2014-02-15T11:00:00.000Z
Updated: 2024-08-06T23:00:34.176Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1749 |
vulnerable | 2026-06-08 04:58:01.826450 |
Details available
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Published: 2014-02-26T15:00:00.000Z
Updated: 2024-08-06T22:37:25.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0252 |
vulnerable | 2026-06-08 04:47:21.157385 |
Details available
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Published: 2003-07-15T04:00:00.000Z
Updated: 2024-08-08T01:50:46.930Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.