CVE-2018-17158

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.

• CWE-190

• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascThird Party Advisory
• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascThird Party Advisory

Published

Dec 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17152Intersystems Cache 2017.2.2.865.0 allows XXE.
• CVE-2018-17153It was discovered that the Western Digital My Cloud device b…
• CVE-2018-17154In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and…
• CVE-2018-17155In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.…
• CVE-2018-17156In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, …
• CVE-2018-17157In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-17159In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-1716IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to…6.1
• CVE-2018-17160In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, …
• CVE-2018-17161In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.…
• CVE-2018-17162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-17163Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…