Packages
- libnfs - NFS client library
Details
It was discovered that libnfs did not properly enforce the maximum
size bound during ZDR decoding, resulting in an out-of-bounds write.
An attacker could possibly use this issue to cause libnfs to crash,
resulting in a denial of service, or execute arbitrary code.
It was discovered that libnfs did not properly enforce the maximum
size bound during ZDR decoding, resulting in an out-of-bounds write.
An attacker could possibly use this issue to cause libnfs to crash,
resulting in a denial of service, or execute arbitrary code.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 26.10 stonking | libnfs14 – 5.0.2-1ubuntu3.1 | ||
| 26.04 LTS resolute | libnfs14 – 5.0.2-1ubuntu1.2 | ||
| 24.04 LTS noble | libnfs14 – 5.0.2-1ubuntu0.24.04.2 | ||
| 22.04 LTS jammy | libnfs13 – 4.0.0-1ubuntu0.2 | ||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.