nfs-utils-2.3.3-68.el8_10
エラータID: AXSA:2026-284:01
リリース日:
2026/03/12 Thursday - 15:13
題名:
nfs-utils-2.3.3-68.el8_10
影響のあるチャネル:
Asianux Server 8 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- nfs-utils の rpc.mountd デーモンには、/etc/exports ファイルに
定義された root_squash および all_squash 属性値に関わらずそれ以上
の権限で任意のディレクトリやそのサブツリーへのアクセスを許容して
しまう問題があるため、リモートの攻撃者により、NFSv3 プロトコルに
よるマウントを介して、情報の漏洩を可能とする脆弱性が存在します。
(CVE-2025-12801)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-12801
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.
A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.
追加情報:
N/A
ダウンロード:
SRPMS
- nfs-utils-2.3.3-68.el8_10.src.rpm
MD5: b27766ca90ea02f8093b396314420c11
SHA-256: fc783c0b83fe691afff85e7994d2088eb958108c6d1e9d5b305effacbf829c46
Size: 876.47 kB
Asianux Server 8 for x86_64
- libnfsidmap-2.3.3-68.el8_10.i686.rpm
MD5: bc8d423e434b3cf44da1d993e0b48a9c
SHA-256: 501ae8d18e9efd63c63e8caff70f32a32c0896a7650954fac9814f7887ed92e2
Size: 125.70 kB - libnfsidmap-2.3.3-68.el8_10.x86_64.rpm
MD5: e849db7ca524c7a2f26b3fced6d32c82
SHA-256: 45962597eb6fbe672e74c4e8194adac2c1573f90088a42f0ae0c5346efc9213f
Size: 122.44 kB - libnfsidmap-devel-2.3.3-68.el8_10.i686.rpm
MD5: adbc31cb8fa82a914f2c02cd7c55f344
SHA-256: a2377bda3f7c8262f8c4156f198b9a8c44c9822e839f6e370bec17064ec34f40
Size: 74.66 kB - libnfsidmap-devel-2.3.3-68.el8_10.x86_64.rpm
MD5: 25ca560e1cb8d33ea8390abfad635197
SHA-256: 84933301c14ccb6e8f360442c9de058372aa0a6c99e57b0f7765aa885e9895da
Size: 74.64 kB - nfs-utils-2.3.3-68.el8_10.x86_64.rpm
MD5: 95d792315cbc938fc0e44403be7852a7
SHA-256: d00a833e8325c2491078a6a2b2ad8276d0264084e00181c9b42b7590db6efb8c
Size: 517.69 kB
English