nfs-utils

11 results · Feed

• Medium 5.9
  CVE-2026-89096

  Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statd

  A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback pro…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 16, 2026
• Medium 5.5
  CVE-2026-89098

  Nfs-utils: nfs-utils: denial of service via assertion failure in fsidd

  A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Oct 16, 2026
• Medium 6.5
  CVE-2025-12801

  Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

  A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Mar 4, 2026
• Medium 5.1
  CVE-2019-3689

  nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

  The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by statd:nogroup. This directory contains …

  SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 nfs-utils Linux Debian Ubuntu
  Sep 19, 2019
• Unscored —
  CVE-2011-1749

  The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to appe…

  nfs-utils Debian
  Feb 26, 2014
• Unscored —
  CVE-2011-2500

  The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to…

  nfs-utils Debian
  Feb 15, 2014
• Unscored —
  CVE-2013-1923

  rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which…

  nfs-utils Debian
  Jan 21, 2014
• Unscored —
  CVE-2008-4552

  The good_client function in nfs-utils 1.0.9, and possibly other versions before 1.1.3, invokes the hosts_ctl function w…

  nfs-utils Debian
  Oct 14, 2008
• Unscored —
  CVE-2004-1014

  statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denia…

  nfs-utils Debian
  Dec 8, 2004
• Unscored —
  CVE-2004-0154

  rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS m…

  nfs-utils Debian
  May 12, 2004
• Unscored —
  CVE-2003-0252 EPSS 16%

  Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote a…

  nfs-utils Debian
  Jul 15, 2003