CVE-2021-3178

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to…

published January 19, 2021

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02447 · 84.2th percentile
Published
2021-01-19T06:44Z
EPSS history
Timeline
  • 19 JAN 06:44Z
    fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to…
    cvelistv5