Improper input validation in Linux-Nfs Nfs-Utils

CVE-2011-1749

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.004 (28.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References