FreeBSD NFS Server Denial of Service (CVE-2018-17158; CVE-2018-17157; CVE-2018-17159)

A denial-of-service vulnerability exists in the NFS Server component. The vulnerability is due to improper handling of various NFS requests within function. Successful exploitation could exhaust all available memory, resulting in denial-of-service conditions...

CVE-2018-17157

Affected software: FreeBSD NFS server on FreeBSD 11.x (pre-11.2-STABLE r340854 and 11.2-RELEASE-p5). Vulnerability: Integer overflow while handling NFSv4 opcodes, causing memory corruption. Impact: Unprivileged remote users with NFS access may execute arbitrary code on the server or cause crashes...