Vulnerabilities

TI-2025-11726 CVE-2025-12801 · GHSA-q8x7-j9x6-2fpc

Nfs-utils: rpc.mountd in the nfs-utils privilege escalation

LOW 29

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00514 Published 2026-03-04 Partial fix · 1:2.8.3-0.el10_1.3, 1:2.3.3-68.el8_10 +8 CWE-279

TI-2019-02711 CVE-2019-3689 · GHSA-qh2q-m44h-cfm8

nfs-utils: root-owned files stored in insecure /var/lib/nfs directory

MEDIUM 45

The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 before and including version 2.1.1-6.10.2 the directory /var/lib/nfs is owned by…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01518 Published 2019-09-19 Will not fix CWE-276

TI-2011-01528 CVE-2011-1749 · GHSA-c72p-cwvx-7724

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils…

LOW 16

The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00348 Published 2014-02-26 Fixed CWE-20

TI-2011-02192 CVE-2011-2500 · GHSA-crxh-9828-m763

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before…

LOW 38

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing cra…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02565 Published 2014-02-15 Fixed CWE-264

TI-2013-01699 CVE-2013-1923 · GHSA-xr88-75g2-cjj4

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names…

LOW 18

rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.

CVSS 2.0LOW 3.2 Adjacent network No auth Interaction — EPSS 0.01138 Published 2014-01-21 Will not fix CWE-200

TI-2003-00233 CVE-2003-0252 · GHSA-69rx-rcww-qf58

Off-by-one error in the xlog function of mountd in the Linux NFS utils package…

MEDIUM 58

Off-by-one error in the xlog function of mountd in the Linux NFS utils package (nfs-utils) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain RPC requests to…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15784 Published 2003-07-15 Fixed CWE-193