CVE-2018-17157

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
FreeBSD	FreeBSD	FreeBSD 11.2 before 11.2-RELEASE-p5

References

http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1042164Patch, Third Party Advisory, VDB Entry
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/Third Party Advisory
https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascPatch, Vendor Advisory
http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1042164Patch, Third Party Advisory, VDB Entry
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/Third Party Advisory
https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascPatch, Vendor Advisory

Timeline

Published: Dec 4, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-171587.5In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length fiel CVE-2018-171597.5In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged CVE-2018-17166.1IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc CVE-2018-1716010.0In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can p CVE-2018-171619.8In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provi CVE-2018-171675.4PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) "Machine Host Name" or "Server Serial CVE-2018-171686.5PrinterOn Enterprise 4.1.4 contains multiple Cross Site Request Forgery (CSRF) vulnerabilities in the Administration page. For example, an a CVE-2018-171697.7An XML external entity (XXE) vulnerability in PrinterOn version 4.1.4 and lower allows remote authenticated users to read arbitrary files or CVE-2018-171708.1Grouptime Teamwire Desktop Client 1.5.1 prior to 1.9.0 on Windows allows code injection via a template, leading to remote code execution. Al CVE-2018-171729.8The web application on Xerox AltaLink B80xx before 100.008.028.05200, C8030/C8035 before 100.001.028.05200, C8045/C8055 before 100.002.028.0 CVE-2018-171739.8LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourceUri parameter to qsr_server/device/getThumbnail.CVE-2018-171749.8A stack-based buffer overflow was discovered in the xtimor NMEA library (aka nmealib) 0.5.3. nmea_parse() in parser.c allows an attacker to