CVE-2018-17158

CVE-2018-17158: falha em FreeBSD

Publicada em · Atualizada em

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 4.4%
probabilidade de exploração
4.4%top 9% das CVEs
exploração observada
nãonenhuma fonte reporta
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.
Produtos afetados
FreeBSD · FreeBSD
CVEs relacionadas — FreeBSD

No mesmo produto, das mais perigosas para as menos.

CVE-2018-17157—CVE-2018-17157EPSS 24.2%CVE-2017-1084—CVE-2017-1084EPSS 15.3%CVE-2025-14558HIGHRemote code execution via ND6 Router AdvertisementsEPSS 6.4%CVE-2019-5600—CVE-2019-5600EPSS 4.9%CVE-2018-6918—CVE-2018-6918EPSS 4.2%CVE-2018-17159—CVE-2018-17159EPSS 4.2%
Referências
https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.aschttp://www.securityfocus.com/bid/106192http://www.securitytracker.com/id/1042164