CVE-2018-17157: Integer Overflow
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-17157?
CVE-2018-17157 has a critical severity as it allows unprivileged remote users to execute arbitrary code.
How do I fix CVE-2018-17157?
To fix CVE-2018-17157, upgrade FreeBSD to version 11.2-STABLE(r340854) or 11.2-RELEASE-p5 or later.
Who is affected by CVE-2018-17157?
CVE-2018-17157 affects users running FreeBSD versions prior to 11.2-STABLE(r340854) and 11.2-RELEASE-p5.
What type of vulnerability is CVE-2018-17157?
CVE-2018-17157 is an integer overflow vulnerability related to NFSv4 request handling.
Can CVE-2018-17157 be exploited remotely?
Yes, CVE-2018-17157 can be exploited remotely by unprivileged users accessing the NFS server.