CVE-2018-17158

7.5 highEPSS 4.4%

High (7.5) in freebsd freebsd. EPSS 4.4% chance of exploitation in the next 30 days.

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-190
Published: 2018-12-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freebsd:freebsd

References

http://www.securityfocus.com/bid/106192
http://www.securitytracker.com/id/1042164
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/
https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc
http://www.securityfocus.com/bid/106192

Check your stack JSON