Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-1014

Fixed in a distro release EPSS 2%

statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.

Published 2004-12-08 · CVE record · OSV

Products: nfs-utils, debian_linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat enterprise_linux, redhat enterprise_linux_desktop

Distro releases

ReleasePackageFixed in
Debian 12nfs-utils1:1.0.6-3.1
Debian 13nfs-utils1:1.0.6-3.1
Debian 14nfs-utils1:1.0.6-3.1
Debian 3.0nfs-utils1.0-2woody2
Red Hat Enterprise Linux 3nfs-utils0:1.0.6-33EL
Red Hat Enterprise Linux 3nfs-utils-debuginfo0:1.0.6-33EL