1. Home
  2. CVE Database
  3. CVE-2011-4131
MEDIUM · 4.6

CVE-2011-4131

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an exc...

Vulnerability Description

The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an excessive number of bitmap words.

CVSS Score

4.6

MEDIUM

AV:A/AC:H/Au:N/C:N/I:N/A:C
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE

Affected Products

VendorProductVersions
LinuxLinux Kernel3.2

Related Weaknesses (CWE)

CWE-189

References

FAQ

What is CVE-2011-4131?

CVE-2011-4131 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The NFSv4 implementation in the Linux kernel before 3.2.2 does not properly handle bitmap sizes in GETACL replies, which allows remote NFS servers to cause a denial of service (OOPS) by sending an exc...

How severe is CVE-2011-4131?

CVE-2011-4131 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2011-4131?

Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.