FreeBSD NFS Server Denial of Service (CVE-2018-17158; CVE-2018-17157; CVE-2018-17159)

A denial-of-service vulnerability exists in the NFS Server component. The vulnerability is due to improper handling of various NFS requests within function. Successful exploitation could exhaust all available memory, resulting in denial-of-service conditions...

CVE-2018-17159

CVE-2018-17159 affects FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, where the NFS server lacks a bounds check in the READDIRPLUS NFS request. This can allow unprivileged remote users with access to the NFS server to cause resource exhaustion by forcing the server to allocate an arbitr...