Description
Buffer overflow in the xdr_xcode_array2 function in xdr.c in Linux kernel 2.6.12, as used in SuSE Linux Enterprise Server 9, might allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted XDR data for the nfsacl protocol.
References (7)
Core 7
Core References
Various Sources x_refsource_misc
http://lkml.org/lkml/2005/6/23/19
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14470
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16406
Various Sources x_refsource_confirm
http://lkml.org/lkml/2005/6/23/126
Patch, Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_44_kernel.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21805
Various Sources x_refsource_confirm
http://linux.bkbits.net:8080/linux-2.6/cset%4042b9c4fdYUuaq0joRUZi8W0Q-2hA1A
Scores
EPSS
0.0474
EPSS Percentile
91.1%
Details
Status
published
Products (1)
linux/linux_kernel
< 2.6.5
Published
Aug 08, 2005
Tracked Since
Feb 18, 2026