Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-3726

high · 7.8

The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.

7.8
CVSS
12.0%
EPSS (exploit prob.)
96th
EPSS percentile
2009-11-09
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
linuxlinux_kernel<= 2.6.31
linuxlinux_kernel2.2.27
linuxlinux_kernel2.4.1
linuxlinux_kernel2.4.2
linuxlinux_kernel2.4.3
linuxlinux_kernel2.4.4
linuxlinux_kernel2.4.5
linuxlinux_kernel2.4.6
linuxlinux_kernel2.4.7
linuxlinux_kernel2.4.8
linuxlinux_kernel2.4.9
linuxlinux_kernel2.4.10
linuxlinux_kernel2.4.11
linuxlinux_kernel2.4.12
linuxlinux_kernel2.4.13
linuxlinux_kernel2.4.14
linuxlinux_kernel2.4.15
linuxlinux_kernel2.4.16
linuxlinux_kernel2.4.17
linuxlinux_kernel2.4.18
linuxlinux_kernel2.4.19
linuxlinux_kernel2.4.20
linuxlinux_kernel2.4.21
linuxlinux_kernel2.4.22
linuxlinux_kernel2.4.23
linuxlinux_kernel2.4.24
linuxlinux_kernel2.4.25
linuxlinux_kernel2.4.26
linuxlinux_kernel2.4.27
linuxlinux_kernel2.4.28
linuxlinux_kernel2.4.29
linuxlinux_kernel2.4.29
linuxlinux_kernel2.4.29
linuxlinux_kernel2.4.30
linuxlinux_kernel2.4.30
linuxlinux_kernel2.4.30
linuxlinux_kernel2.4.31
linuxlinux_kernel2.4.32
linuxlinux_kernel2.4.33
linuxlinux_kernel2.4.34.3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3726