CVE-2008-3915
Summary
| CVE | CVE-2008-3915 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2008-09-11 01:13:41 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an unknown impact via vectors related to decoding an NFSv4 acl. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | 2.6.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.19.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.20.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.21.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.18 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.19 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.20 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.21 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.22 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.22.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.16 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.17 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.23.9 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.24.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.1 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.10 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.11 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.12 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.13 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.14 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.15 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.2 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.3 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.4 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.5 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.6 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.7 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.8 | All | All | All |
| Operating System | Linux | Linux Kernel | 2.6.25.9 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 404: File not found | af854a3a-2127-422b-91ae-364da2661108 | www.kernel.org | |
| Red Hat update for kernel - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian -- Security Information -- DSA-1636-1 linux-2.6.24 | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| oss-security - Re: CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| oss-security - CVE request: kernel: nfsd: fix buffer overrun decoding NFSv4 acl | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| Bug 461101 – CVE-2008-3915 kernel: nfsd: fix buffer overrun decoding NFSv4 acl | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | af854a3a-2127-422b-91ae-364da2661108 | git.kernel.org | |
| Ubuntu update for linux - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| Linux kernel NFSv4 ACL Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Debian update for linux-2.6.24 - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| USN-659-1: Linux kernel vulnerabilities | Ubuntu | af854a3a-2127-422b-91ae-364da2661108 | www.ubuntu.com | |
| LKML: Greg KH: [patch 05/16] nfsd: fix buffer overrun decoding NFSv4 acl | af854a3a-2127-422b-91ae-364da2661108 | lkml.org | |
| Support | af854a3a-2127-422b-91ae-364da2661108 | www.redhat.com | |
| kernel/git/torvalds/linux.git - Linux kernel source tree | MITRE | git.kernel.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2009-01-15 | Tomas Hoger | This issue did not affect the versions of Linux kernel as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5. It was addressed in Red Hat Enterprise MRG for RHEL-5 via: https://rhn.redhat.com/errata/RHSA-2008-0857.html |
There are currently no legacy QID mappings associated with this CVE.