QwikSec

Security Database

CVE

CWE

Training

CVE-2018-17157

Published: Dec 4, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.

Vendor	Product	Versions
FreeBSD	FreeBSD	affected `FreeBSD 11.2 before 11.2-RELEASE-p5`

References

vdb-entry

x_refsource_BID

https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/

x_refsource_MISC

FreeBSD-SA-18:13

vendor-advisory

x_refsource_FREEBSD

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.