Description
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | redhat-config-nfs | 1.0.13-6 | RHSA-2004:434 |
Advisories 1
- RHSA-2004:434 Red Hat Security Advisory: redhat-config-nfs security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2004:434 vendor-advisory
- red-hat-permission-gain-privileges(17478) vdb-entry
- oval:org.mitre.oval:def:10696 vdb-entry signature
- 11240 vdb-entry
- FLSA:152787 vendor-advisory