High severity7.5NVD Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-17158

Description

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSD4 versions
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*range: <11.2
- cpe:2.3:o:freebsd:freebsd:11.2:p5:*:*:*:*:*:*
- (no CPE)range: <11.2-STABLE(r340854) and <11.2-RELEASE-p5
- (no CPE)range: FreeBSD 11.2 before 11.2-RELEASE-p5

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/106192nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1042164nvdThird Party AdvisoryVDB Entry
secuniaresearch.flexerasoftware.com/secunia_research/2018-24/nvdThird Party Advisory
security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000