Description
The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam_r function when performing a username lookup, which can cause it to report a file as being owned by "root" instead of "nobody" if the file exists on the server but not on the client.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | libnfsidmap | 0.18-0 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | nfs-utils-lib +1 | 1.0.8-7.2.z2 | RHSA-2007:0951 |
Advisories 1
- RHSA-2007:0951 Red Hat Security Advisory: nfs-utils-lib security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 27043 third-party-advisory
- oval:org.mitre.oval:def:9864 vdb-entry signature
- RHSA-2007:0951 vendor-advisory
- SUSE-SR:2007:018 vendor-advisory
- 26767 vdb-entry
- MDKSA-2007:240 vendor-advisory
- 45825 vdb-entry
- 26674 third-party-advisory
- nfsv4-idmapper-uid-unspecified(36396) vdb-entry