nfsd in the Linux kernel through 4.6.3 allows local users to bypass intended file-permission restrictions by setting a POSIX ACL, related to nfs2acl.c, nfs3acl.c, and nfs4acl.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1237.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"160425182950592742366881302833708428989",
"61453351656857364244546049954353379996",
"258140564174943594239267850773949326461",
"175264951046732707325154886582275871853",
"18589190185620330968076727417421496976",
"269343965757660049044918417140834524441",
"270494040186201406617457069675735940254",
"266235900029798494189337734283404762062",
"236959091044921677336970833185465652768",
"192812578480176796903245723375879478745",
"75579160328741703495111861158943450527",
"20328926744716735048780202318950464911",
"250482214931489364249720146750904585988",
"191743576422114062881049411268675317298",
"190154194898781262617020804968241823667",
"139027574757890457244564197679458519778",
"157616261577454588097590610488588692952",
"136954102301872208391482556868177007622",
"288899850096804081178358334794059714668",
"57501386273971753639477428621284921299",
"320250537442787944518802472200032597288"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-4bb6e1d9",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs2acl.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "311408704066573009658318436997714656075",
"length": 933.0
},
"id": "CVE-2016-1237-92d7c55d",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs4acl.c",
"function": "nfsd4_set_nfs4_acl"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "235372865876747971981175838478272021546",
"length": 993.0
},
"id": "CVE-2016-1237-a6248258",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs2acl.c",
"function": "nfsacld_proc_setacl"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"160425182950592742366881302833708428989",
"61453351656857364244546049954353379996",
"258140564174943594239267850773949326461",
"175264951046732707325154886582275871853",
"18589190185620330968076727417421496976",
"269343965757660049044918417140834524441",
"270494040186201406617457069675735940254",
"266235900029798494189337734283404762062",
"236959091044921677336970833185465652768",
"192812578480176796903245723375879478745",
"75579160328741703495111861158943450527",
"20328926744716735048780202318950464911",
"270836764301388079423048435318182826718",
"141831246990807755835530067305541982101",
"256493989002754019288227681909732136099",
"320250537442787944518802472200032597288"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-e029fc26",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs3acl.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "92928640708819416832121825686131566415",
"length": 820.0
},
"id": "CVE-2016-1237-f511e7fa",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs3acl.c",
"function": "nfsd3_proc_setacl"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git@999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"260681562414887206658424467389700799166",
"276064111912710929547060456465724037928",
"72765565154976667111330242042656711229",
"310862509873124574091041071154031566431",
"329201714737400415253051222451776751302",
"270785686844530245480886790516410154953",
"295357585666893178207783306014996695786",
"42699504121371395090160869924194574797",
"248357186283773728334367203671734469774",
"192322937866662993944602156012377028718",
"224274904072709837396639395025071801294",
"336356555408359638795426872373278921238",
"170797746017461190767218522365037989582",
"40651689418280997883395095298621242162",
"196317275593925972287982586930400305960",
"138988857803814995108805456844180665659"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-f6986658",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs4acl.c"
}
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1237.json"
[
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "235372865876747971981175838478272021546",
"length": 993.0
},
"id": "CVE-2016-1237-59079c1d",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs2acl.c",
"function": "nfsacld_proc_setacl"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "311408704066573009658318436997714656075",
"length": 933.0
},
"id": "CVE-2016-1237-5a5cfabf",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs4acl.c",
"function": "nfsd4_set_nfs4_acl"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"160425182950592742366881302833708428989",
"61453351656857364244546049954353379996",
"258140564174943594239267850773949326461",
"175264951046732707325154886582275871853",
"18589190185620330968076727417421496976",
"269343965757660049044918417140834524441",
"270494040186201406617457069675735940254",
"266235900029798494189337734283404762062",
"236959091044921677336970833185465652768",
"192812578480176796903245723375879478745",
"75579160328741703495111861158943450527",
"20328926744716735048780202318950464911",
"270836764301388079423048435318182826718",
"141831246990807755835530067305541982101",
"256493989002754019288227681909732136099",
"320250537442787944518802472200032597288"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-c5316adb",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs3acl.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"260681562414887206658424467389700799166",
"276064111912710929547060456465724037928",
"72765565154976667111330242042656711229",
"310862509873124574091041071154031566431",
"329201714737400415253051222451776751302",
"270785686844530245480886790516410154953",
"295357585666893178207783306014996695786",
"42699504121371395090160869924194574797",
"248357186283773728334367203671734469774",
"192322937866662993944602156012377028718",
"224274904072709837396639395025071801294",
"336356555408359638795426872373278921238",
"170797746017461190767218522365037989582",
"40651689418280997883395095298621242162",
"196317275593925972287982586930400305960",
"138988857803814995108805456844180665659"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-c5586f85",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs4acl.c"
}
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"line_hashes": [
"160425182950592742366881302833708428989",
"61453351656857364244546049954353379996",
"258140564174943594239267850773949326461",
"175264951046732707325154886582275871853",
"18589190185620330968076727417421496976",
"269343965757660049044918417140834524441",
"270494040186201406617457069675735940254",
"266235900029798494189337734283404762062",
"236959091044921677336970833185465652768",
"192812578480176796903245723375879478745",
"75579160328741703495111861158943450527",
"20328926744716735048780202318950464911",
"250482214931489364249720146750904585988",
"191743576422114062881049411268675317298",
"190154194898781262617020804968241823667",
"139027574757890457244564197679458519778",
"157616261577454588097590610488588692952",
"136954102301872208391482556868177007622",
"288899850096804081178358334794059714668",
"57501386273971753639477428621284921299",
"320250537442787944518802472200032597288"
],
"threshold": 0.9
},
"id": "CVE-2016-1237-d2299da1",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs2acl.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/999653786df6954a31044528ac3f7a5dadca08f4",
"digest": {
"function_hash": "92928640708819416832121825686131566415",
"length": 820.0
},
"id": "CVE-2016-1237-ef8f46f3",
"deprecated": false,
"target": {
"file": "fs/nfsd/nfs3acl.c",
"function": "nfsd3_proc_setacl"
}
}
]