CVE-2004-1014

9 documents8 sources
Severity
5.0MEDIUM
EPSS
2.5%
top 14.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Debian Debian LinuxMandrakesoft Mandrake LinuxMandrakesoft Mandrake Linux Corporate Server+3 more
Timeline
PublishedJan 10
Latest updateApr 29

Description

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages5 packages

▶Debiannfs-utils< 1:1.0.6-3.1+3
▶NVDnfs/nfs-utils1.0.6
▶NVDmandrakesoft/mandrake_linux10.0, 10.1, 9.2+2

Also affects: Debian Linux 3.0, Enterprise Linux 3.0

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-jx7p-442j-f3rh: statd in nfs-utils 1↗2022-04-29
▶
OSV
CVE-2004-1014: statd in nfs-utils 1↗2005-01-10
▶
CVEList
CVE-2004-1014: statd in nfs-utils 1↗2004-12-08
▶

📋Vendor Advisories

3
Red Hat
security flaw↗2004-12-01
▶
Ubuntu
NFS statd vulnerability↗2004-12-01
▶
Debian
CVE-2004-1014: nfs-utils - statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which a...↗2004
▶

💬Community

1
Bugzilla
CVE-2004-1014 security flaw↗2018-08-16
▶