• info
• discussion
• exploit
• solution
• references

Linux NFS RPC.STATD Remote Denial Of Service Vulnerability

It is reported that 'rpc.statd' is vulnerable to a remote denial-of-service vulnerability.

This vulnerability allows remote attackers to crash the affected application. This may result in the failure to clean up NFS network locks, possibly resulting in denied access to files, because they may be considered permanently locked.

Version 1.0.6 of nfs-utils is reported vulnerable to this issue. Other versions may also be affected.