Description
Buffer overflow in the realpath function in nfs-server rpc.mountd, as used in SUSE Linux 9.1 through 10.0, allows local users to execute arbitrary code via unspecified vectors involving mount requests and symlinks.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-975-1 nfs-user-server - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- ADV-2006-0348 vdb-entry
- SUSE-SA:2006:005 vendor-advisory
- 18614 third-party-advisory
- 18638 third-party-advisory
- DSA-975 vendor-advisory
- 16388 vdb-entry
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350020
- 18889 third-party-advisory
- nfs-rpcmountd-realpath-bo(24347) vdb-entry