CVE-2018-17157

2018-12-0415:00:00

freebsd

www.cve.org

9.9 High

AI Score

Confidence

High

0.522 Medium

EPSS

Percentile

97.6%

JSON

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.

CNA Affected

[
  {
    "product": "FreeBSD",
    "vendor": "FreeBSD",
    "versions": [
      {
        "status": "affected",
        "version": "FreeBSD 11.2 before 11.2-RELEASE-p5"
      }
    ]
  }
]