Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Linux Kernel 2.4 can crash when NFS reads long symlink

CVE-2005-4798 · published 20 years ago
Summary

The Linux kernel versions 2.4 through 2.4.31 may stop working if a network file system (NFS) server sends a specially crafted, overly long symbolic link. This can cause the NFS client on the affected machine to crash, leading to a denial of service. Upgrade to a newer kernel version or disable NFS client support until the patch is applied.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linux linux_kernel 2.4.0
2.4.1
2.4.2
2.4.3
2.4.10
2.4.11
2.4.12
2.4.13
2.4.14
2.4.15
2.4.16
2.4.17
15 more version ranges
cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*
Original advisory text
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1)...
Buffer overflow in NFS readlink handling in the Linux Kernel 2.4 up to 2.4.31 allows remote NFS servers to cause a denial of service (crash) via a long symlink, which is not properly handled in (1) nfs2xdr.c or (2) nfs3xdr.c and causes a crash in the NFS client.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
3% chance of attack within 30 days
Timeline
Published31 Dec 2005
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2005-4798 · NVD
Track software like this
Free during beta