CVE-2018-17159

HIGH · CVSS 7.5 EPSS 4.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-04 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-17159

Severity

HIGH

CVSS

7.5

EPSS

4.21%

Original NVD Description

In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged remote users with access to the NFS server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation.