FreeBSD NFS Server Denial of Service (CVE-2018-17158; CVE-2018-17157; CVE-2018-17159)

A denial-of-service vulnerability exists in the NFS Server component. The vulnerability is due to improper handling of various NFS requests within function. Successful exploitation could exhaust all available memory, resulting in denial-of-service conditions...

CVE-2018-17158

In FreeBSD before 11.2-STABLEr340854 and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request...

CVE-2018-17158

CVE-2018-17158 affects the FreeBSD NFS server. The issue arises in the NFSv4 request handling where an integer overflow on the client address length field can occur, potentially allowing unprivileged remote users to crash the server. Public documentation from NVD and FreeBSD advisory confirms the...