Description
Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to mountd that do not contain newlines.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nfs-utils | 1:1.0.3-2 | — |
| Debian 13 | nfs-utils | 1:1.0.3-2 | — |
| Debian 12 | nfs-utils | 1:1.0.3-2 | — |
| Debian 3.0 | nfs-utils | 1:1.0-2woody1 | DSA-349 |
Advisories 1
- DSA-349 nfs-utils - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 1001262 vendor-advisory
- RHSA-2003:206 vendor-advisory
- 8179 vdb-entry
- 20030716 Immunix Secured OS 7+ nfs-utils update -- bugtraq mailing-list
- http://isec.pl/vulnerabilities/isec-0010-linux-nfs-utils.txt
- TLSA-2003-44 vendor-advisory
- RHSA-2003:207 vendor-advisory
- 20030714 Linux nfs-utils xlog() off-by-one bug mailing-list
- 1007187 vdb-entry
- 20030714 Reality of the rpc.mountd bug mailing-list
- MDKSA-2003:076 vendor-advisory
- 20030714 Linux nfs-utils xlog() off-by-one bug mailing-list
- 20030715 [slackware-security] nfs-utils packages replaced (SSA:2003-195-01b) mailing-list
- 9259 third-party-advisory
- nfs-utils-offbyone-bo(12600) vdb-entry
- oval:org.mitre.oval:def:443 vdb-entry signature
- VU#258564 third-party-advisory
- SuSE-SA:2003:031 vendor-advisory
- DSA-349 vendor-advisory