CVE-2011-2500

The host_reliable_addrinfo function in support/export/hostname.c in nfs-utils before 1.2.4 does not properly use DNS to verify access to NFS exports, which allows remote attackers to mount filesystems by establishing crafted DNS A and PTR records.

View graph Watch Export

CVSS v3.1

—

EPSS

2.56%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

EPSS Trend

Aug 16, 2026 → Sep 9, 2026

▲ 0.02pp

2.54% → 2.56% over 2 tracked changes

Connections

2 relationships

CWE-264

source

Timeline

disclosure → media coverage

Feb 15, 2014

Disclosure — published as a CVE record. · last revised by NVD Apr 29, 2026