Description
The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nfs-utils | 1:1.2.4-1 | — |
| Debian 13 | nfs-utils | 1:1.2.4-1 | — |
| Debian 12 | nfs-utils | 1:1.2.4-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | nfs-utils | 1:1.2.3-15.el6 | RHSA-2011:1534 |
Advisories 1
- RHSA-2011:1534 Red Hat Security Advisory: nfs-utils security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- https://bugzilla.redhat.com/show_bug.cgi?id=716949
- http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/Changelog-nfs-utils-1.2.4/download
- [linux-nfs] 20110622 [PATCH] nfs: fix host_reliable_addrinfo (try #2) mailing-list
- RHSA-2011:1534 vendor-advisory
- http://sourceforge.net/projects/nfs/files/nfs-utils/1.2.4/