cve/2013/CVE-2013-4591.md

CVE-2013-4591

Description

Buffer overflow in the __nfs4_get_acl_uncached function in fs/nfs/nfs4proc.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a getxattr system call for the system.nfs4_acl extended attribute of a pathname on an NFSv4 filesystem.

POC

Reference

• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2
• http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.2

Github

No PoCs found on GitHub currently.