cvedb.io
CVE-2018-17158
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2018-12-04T15:29:00.307 · Last modified 2026-06-17T01:45:27.083

Summary

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.

Affected products

freebsd — freebsd

Does this affect you?

Add your gear to cvedb and we'll alert you only when freebsd ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.