Summary
It was discovered that libnfs did not properly enforce the maximum
size bound during ZDR decoding, resulting in an out-of-bounds write.
An attacker could possibly use this issue to cause libnfs to crash,
resulting in a denial of service, or execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libnfs | 4.0.0-1ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | libnfs | 5.0.2-1ubuntu0.24.04.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | libnfs | 5.0.2-1ubuntu1.2 |
| Ubuntu · 26.10 | libnfs | 5.0.2-1ubuntu3.1 |
Vulnerabilities 1
-
High 7.1
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_…
References
-
report
https://ubuntu.com/security/CVE-2026-108985