FreeBSD 'sys/netsmb/smb_subr.c' out-of-bounds read denial of service vulnerability

FreeBSD is a BSD-based operating system. A security vulnerability in the FreeBSD smbstrdupin function in sys/netsmb/smbsubr.c allows attackers to exploit the vulnerability to submit a special request and crash the system...

Race condition

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

CVE-2017-15037

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

CVE-2017-15037

In FreeBSD up to version 11.1, the race condition in smb_strdupin (sys/netsmb/smb_subr.c) can cause t2p->t_name strings to miss a terminating '\0', leading to an out-of-bounds read. This is a concrete technical detail from the CVE entry and connected records describe the vulnerable function an...

CVE-2017-15037

Removed by vendor...