CVE-2018-17159

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged remote users with access to the NFS server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation.

• CWE-400

• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascThird Party Advisory
• http://www.securityfocus.com/bid/106192Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1042164Third Party Advisory, VDB Entry
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-24/Third Party Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.ascThird Party Advisory

Published

Dec 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17153It was discovered that the Western Digital My Cloud device b…
• CVE-2018-17154In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and…
• CVE-2018-17155In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.…
• CVE-2018-17156In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, …
• CVE-2018-17157In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-17158In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-1716IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to…6.1
• CVE-2018-17160In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, …
• CVE-2018-17161In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.…
• CVE-2018-17162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-17163Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-17167PrinterOn Enterprise 4.1.4 suffers from multiple authenticat…