Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The proc_do_xprt function in net/sunrpc/sysctl.c in the Linux kernel 2.6.26.3 does not check the length of a certain buffer obtained from userspace, which allows local users to overflow a stack-based buffer and have unspecified other impact via a crafted read system call for the /proc/sys/sunrpc/transports file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linux Kernel proc_do_xprt()函数本地栈溢出漏洞
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。 Linux Kernel的net/sunrpc/sysctl.c文件中的proc_do_xprt函数没有检查某些从用户域所获得缓冲区的长度,本地攻击者可以通过对/proc/sys/sunrpc/transports文件特制的读系统调用触发栈溢出,导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A