Description
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nfs-utils | 1:1.2.3-3 | — |
| Debian 13 | nfs-utils | 1:1.2.3-3 | — |
| Debian 12 | nfs-utils | 1:1.2.3-3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | nfs-utils | 1:1.2.3-15.el6 | RHSA-2011:1534 |
| RHEL 5 | nfs-utils | 1:1.0.9-60.el5 | RHSA-2012:0310 |
Advisories 2
- RHSA-2012:0310 Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2011:1534 Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026