PT-2018-13930 · Freebsd · Freebsd

Jakub Jirasek · Published 2018-11-27 · Updated 2019-01-24 · CVE-2018-17157

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLE(r340854) and prior to 11.2-RELEASE-p5

Description The issue is caused by an integer overflow error when handling opcodes, which can lead to memory corruption. This can be triggered by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.

Recommendations For versions prior to 11.2-STABLE(r340854), update to 11.2-STABLE(r340854) or later. For versions prior to 11.2-RELEASE-p5, update to 11.2-RELEASE-p5 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2018-17157

FREEBSD-SA-18_13

Affected Products

Freebsd

References · 6

• https://security.freebsd.org/advisories/FreeBSD-SA-18:13.nfs.asc · Vendor Advisory
• http://securitytracker.com/id/1042164 · Patch
• https://osv.dev/vulnerability/CVE-2018-17157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17157 · Security Note
• https://secuniaresearch.flexerasoftware.com/secunia_research/2018-25 · Note
• http://securityfocus.com/bid/106192 · Note