The lookup_cb_cred function in fs/nfsd/nfs4callback.c in the nfsd4 subsystem in the Linux kernel before 2.6.31.2 attempts to access a credentials cache even when a client specifies the AUTH_NULL authentication flavor, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an NFSv4 mount request.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2009-10-30T20:05:00

Updated: 2024-08-07T06:38:28.461Z

Reserved: 2009-10-09T00:00:00

Link: CVE-2009-3623

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-10-30T20:30:00.343

Modified: 2023-02-13T01:17:47.543

Link: CVE-2009-3623

cve-icon Redhat

Severity : Important

Publid Date: 2009-09-15T00:00:00Z

Links: CVE-2009-3623 - Bugzilla