CVE-2018-17160

In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to overwrite memory in the bhyve host possibly permitting arbitrary code execution. A guest OS using a firmware image can cause the bhyve process to crash, or possibly execute arbitrary code on the host as root.

• CWE-787

• http://www.securityfocus.com/bid/106210Third Party Advisory, VDB Entry
• https://security.freebsd.org/advisories/FreeBSD-SA-18:14.bhyve.ascMitigation, Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106210Third Party Advisory, VDB Entry
• https://security.freebsd.org/advisories/FreeBSD-SA-18:14.bhyve.ascMitigation, Patch, Vendor Advisory

Published

Dec 4, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17155In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.…
• CVE-2018-17156In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, …
• CVE-2018-17157In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-17158In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-17159In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, …
• CVE-2018-1716IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to…6.1
• CVE-2018-17161In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.…
• CVE-2018-17162Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-17163Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-17167PrinterOn Enterprise 4.1.4 suffers from multiple authenticat…
• CVE-2018-17168PrinterOn Enterprise 4.1.4 contains multiple Cross Site Requ…
• CVE-2018-17169An XML external entity (XXE) vulnerability in PrinterOn vers…