{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"nfs-utils security update", "category":"general", "title":"Synopsis" }, { "text":"An update for nfs-utils is now available for openEuler-20.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"This is he nfs-utils tools package. It contains the showmount,mount.nfs,umount.nfs and libnfsidmap\n\nSecurity Fix(es):\n\nA vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the\nprivileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.(CVE-2025-12801)", "category":"general", "title":"Description" }, { "text":"An update for nfs-utils is now available for openEuler-20.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"nfs-utils", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-2688", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2688" }, { "summary":"CVE-2025-12801", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-12801&packageName=nfs-utils" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12801" }, { "summary":"openEuler-SA-2026-2688 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-2688.json" } ], "title":"An update for nfs-utils is now available for openEuler-20.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-06-30T20:09:12+08:00", "revision_history":[ { "date":"2026-06-30T20:09:12+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-06-30T20:09:12+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-06-30T20:09:12+08:00", "id":"openEuler-SA-2026-2688", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-2.5.1-11.oe2003sp4.aarch64.rpm", "name":"nfs-utils-2.5.1-11.oe2003sp4.aarch64.rpm" }, "name":"nfs-utils-2.5.1-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64.rpm", "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64.rpm" }, "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64.rpm", "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64.rpm" }, "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64.rpm", "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64.rpm" }, "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-help-2.5.1-11.oe2003sp4.aarch64.rpm", "name":"nfs-utils-help-2.5.1-11.oe2003sp4.aarch64.rpm" }, "name":"nfs-utils-help-2.5.1-11.oe2003sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-2.5.1-11.oe2003sp4.src.rpm", "name":"nfs-utils-2.5.1-11.oe2003sp4.src.rpm" }, "name":"nfs-utils-2.5.1-11.oe2003sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-2.5.1-11.oe2003sp4.x86_64.rpm", "name":"nfs-utils-2.5.1-11.oe2003sp4.x86_64.rpm" }, "name":"nfs-utils-2.5.1-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64.rpm", "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64.rpm" }, "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64.rpm", "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64.rpm" }, "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64.rpm", "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64.rpm" }, "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"nfs-utils-help-2.5.1-11.oe2003sp4.x86_64.rpm", "name":"nfs-utils-help-2.5.1-11.oe2003sp4.x86_64.rpm" }, "name":"nfs-utils-help-2.5.1-11.oe2003sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-2.5.1-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.aarch64", "name":"nfs-utils-2.5.1-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64", "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64", "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64", "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-help-2.5.1-11.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.aarch64", "name":"nfs-utils-help-2.5.1-11.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-2.5.1-11.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.src", "name":"nfs-utils-2.5.1-11.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-2.5.1-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.x86_64", "name":"nfs-utils-2.5.1-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64", "name":"nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64", "name":"nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64", "name":"nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"nfs-utils-help-2.5.1-11.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.x86_64", "name":"nfs-utils-help-2.5.1-11.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-12801", "notes":[ { "text":"A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the\nprivileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exported directory, regardless of the set file permissions, and regardless of any 'root_squash' or 'all_squash' attributes that would normally be expected to apply to that client.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.src", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.src", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.x86_64" ], "details":"nfs-utils security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2688" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":6.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.src", "openEuler-20.03-LTS-SP4:nfs-utils-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debuginfo-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-debugsource-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-devel-2.5.1-11.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:nfs-utils-help-2.5.1-11.oe2003sp4.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-12801" } ] }