AZL-107960
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107960.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-107960
- Upstream
- Published
- 2026-10-12T03:17:18Z
- Modified
- 2026-10-13T14:17:41Z
- Summary
- CVE-2026-108985 affecting package libnfs 5.0.2-2
- Details
-
ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The caller-supplied maxsize value is not honored.
- References