Unrated severityNVD Advisory· Published Dec 4, 2018· Updated Aug 5, 2024

CVE-2018-17158

Description

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDllm-fuzzy2 versions
<11.2-STABLE(r340854) and 11.2-RELEASE-p5+ 1 more
- (no CPE)range: <11.2-STABLE(r340854) and 11.2-RELEASE-p5
- (no CPE)range: FreeBSD 11.2 before 11.2-RELEASE-p5

Patches

Vulnerability mechanics

References

security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascmitrevendor-advisoryx_refsource_FREEBSD
www.securityfocus.com/bid/106192mitrevdb-entryx_refsource_BID
www.securitytracker.com/id/1042164mitrevdb-entryx_refsource_SECTRACK
secuniaresearch.flexerasoftware.com/secunia_research/2018-24/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000