CVE-2018-17157

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.

• CWE-190

• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Patch, Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascPatch, Vendor Advisory
• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Patch, Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascPatch, Vendor Advisory

Published

Dec 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17151Intersystems Cache 2017.2.2.865.0 has Incorrect Access Contr…
• CVE-2018-17152Intersystems Cache 2017.2.2.865.0 allows XXE.
• CVE-2018-17153It was discovered that the Western Digital My Cloud device b…
• CVE-2018-17154In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and…
• CVE-2018-17155In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.…
• CVE-2018-17156In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, …
• CVE-2018-17158In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-17159In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-1716IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to…6.1
• CVE-2018-17160In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, …
• CVE-2018-17161In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.…
• CVE-2018-17162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…