rainbutterfly/cve_corpus huggingface dataset:
CVE-2018-17063 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/NTPSyncWithHost route. This could lead to command injection via shell metacharacters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17064 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could lead to command injection via the syslogIp parameter after /goform/clearlog is invoked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17065 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite the return address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17066 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This could lead to command injection via shell metacharacters in the datetime parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17067 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17068 
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead to command injection via shell metacharacters in the sendNum parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17069 
An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17070 
An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-15T21:00:00.000Z
CVE-2018-17071 
The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a ticket at a low price by directly calling the fallback function with small msg.value, because the developer set the currency unit incorrectly. Therefore, it allows attackers to always win and get rewards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-17072 
JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17073 
wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17074 
The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17075 
The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset" insertion mode, leading to a "panic: runtime error" for html.Parse of <template><object>, <template><applet>, or <template><marquee>. This is related to HTMLTreeBuilder.cpp in WebKit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17076 
GPP through 2.25 will try to use more memory space than is available on the stack, leading to a segmentation fault or possibly unspecified other impact via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17077 
An issue was discovered in yiqicms through 2016-11-20. There is stored XSS in comment.php because a length limit can be bypassed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T02:00:00.000Z
CVE-2018-17079 
An issue was discovered in ZRLOG 2.0.1. There is a Stored XSS vulnerability in the nickname field of the comment area.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:37:42.000Z
CVE-2018-17081 
e107 2.1.9 allows CSRF via e107_admin/wmessage.php?mode=&action=inline&ajax_used=1&id= for changing the title of an arbitrary page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-26T21:00:00.000Z
CVE-2018-17082 
The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the php_handler function in sapi/apache2handler/sapi_apache2.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T15:00:00.000Z
CVE-2018-17085 
An issue was discovered in OTCMS 3.61. XSS exists in admin/users.php via these parameters: dataTypeCN dataMode dataModeStr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T17:00:00.000Z
CVE-2018-17086 
An issue was discovered in OTCMS 3.61. XSS exists in admin/share_switch.php via these parameters: fieldName fieldName2 tabName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T17:00:00.000Z
CVE-2018-17088 
The ProcessGpsInfo function of the gpsinfo.c file of jhead 3.00 may allow a remote attacker to cause a denial-of-service attack or unspecified other impact via a malicious JPEG file, because there is an integer overflow during a check for whether a location exceeds the EXIF data length. This is analogous to the CVE-2016-3822 integer overflow in exif.c. This gpsinfo.c vulnerability is unrelated to the CVE-2018-16554 gpsinfo.c vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T17:00:00.000Z
CVE-2018-17090 
An issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php are vulnerable to stored XSS that can be triggered by closing <textarea> followed by <script></script> tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17091 
An issue was discovered in DonLinkage 6.6.8. It allows remote attackers to obtain potentially sensitive information via a direct request for files/temporary.txt.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17092 
An issue was discovered in DonLinkage 6.6.8. SQL injection in /pages/proxy/php.php and /pages/proxy/add.php can be exploited via specially crafted input, allowing an attacker to obtain information from a database. The vulnerability can only be triggered by an authorized user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17095 
An issue has been discovered in mpruett Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0. A heap-based buffer overflow in Expand3To4Module::run has occurred when running sfconvert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17096 
The BPMDetect class in BPMDetect.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17097 
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17098 
The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17100 
An issue was discovered in LibTIFF 4.0.9. There is a int32 overflow in multiply_ms in tools/ppm2tiff.c, which can cause a denial of service (crash) or possibly have unspecified other impact via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17101 
An issue was discovered in LibTIFF 4.0.9. There are two out-of-bounds writes in cpTags in tools/tiff2bw.c and tools/pal2rgb.c, which can cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17102 
An issue was discovered in QuickAppsCMS (aka QACMS) through 2.0.0-beta2. A CSRF vulnerability can change the administrator password via the user/me URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17103 
An issue was discovered in GetSimple CMS v3.3.13. There is a CSRF vulnerability that can change the administrator's password via admin/settings.php. NOTE: The vendor reported that the PoC was sending a value for the nonce parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17104 
An issue was discovered in Microweber 1.0.7. There is a CSRF attack (against the admin user) that can add an administrative account via api/save_user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17106 
In Tinyftp Tinyftpd 1.1, a buffer overflow exists in the text variable of the do_mkd function in the ftpproto.c file. An attacker can overwrite ebp via a long pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T21:00:00.000Z
CVE-2018-17107 
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-24T22:00:00.000Z
CVE-2018-17108 
The SBIbuddy (aka com.sbi.erupee) application 1.41 and 1.42 for Android might allow attackers to perform Account Takeover attacks by intercepting a security-question response during the initial configuration of the application.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-16T23:00:00.000Z
CVE-2018-17110 
Simple POS 4.0.24 allows SQL Injection via a products/get_products/ columns[0][search][value] parameter in the management panel, as demonstrated by products/get_products/1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17111 
The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T21:00:00.000Z
CVE-2018-17113 
App/Modules/Admin/Tpl/default/Public/dwz/uploadify/scripts/uploadify.swf in EasyCMS 1.5 has XSS via the uploadifyID or movieName parameter, a related issue to CVE-2018-9173.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17125 
CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17126 
CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17127 
blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereference and device crash) via a request that lacks a timestap parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17128 
A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17129 
MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17130 
PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header,
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17131 
admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17132 
admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17133 
admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17134 
admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T04:00:00.000Z
CVE-2018-17136 
zzcms 8.3 contains a SQL Injection vulnerability in /user/check.php via a Client-Ip HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T06:00:00.000Z
CVE-2018-17137 
Prezi Next 1.3.101.11 has a documented purpose of creating HTML5 presentations but has SE_DEBUG_PRIVILEGE on Windows, which might allow attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T06:00:00.000Z
CVE-2018-17138 
The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T06:00:00.000Z
CVE-2018-17139 
UltimatePOS 2.5 allows users to upload arbitrary files, which leads to remote command execution by posting to a /products URI with PHP code in a .php file with the image/jpeg content type.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T06:00:00.000Z
CVE-2018-17140 
The Quizlord plugin through 2.0 for WordPress is prone to Stored XSS via the title parameter in a ql_insert action to wp-admin/admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T06:00:00.000Z
CVE-2018-17141 
HylaFAX 6.0.6 and HylaFAX+ 5.6.0 allow remote attackers to execute arbitrary code via a dial-in session that provides a FAX page with the JPEG bit enabled, which is mishandled in FaxModem::writeECMData() in the faxd/CopyQuality.c++ file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-21T17:00:00.000Z
CVE-2018-17142 
The html package (aka x/net/html) through 2018-09-17 in Go mishandles <math><template><mo><template>, leading to a "panic: runtime error" in parseCurrentToken in parse.go during an html.Parse call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T14:00:00.000Z
CVE-2018-17143 
The html package (aka x/net/html) through 2018-09-17 in Go mishandles <template><tBody><isindex/action=0>, leading to a "panic: runtime error" in inBodyIM in parse.go during an html.Parse call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-17T14:00:00.000Z
CVE-2018-17144 
Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allow a remote denial of service (application crash) exploitable by miners via duplicate input. An attacker can make bitcoind or Bitcoin-Qt crash.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-19T08:00:00.000Z
CVE-2018-17145 
Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-09-10T16:32:13.000Z
CVE-2018-17146 
A cross-site scripting vulnerability exists in Nagios XI before 5.5.4 via the 'name' parameter within the Account Information page. Exploitation of this vulnerability allows an attacker to execute arbitrary JavaScript code within the auto login admin management page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:25:16.000Z
CVE-2018-17147 
Nagios XI before 5.5.4 has XSS in the auto login admin management page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-10T13:59:13.000Z
CVE-2018-17148 
An Insufficient Access Control vulnerability (leading to credential disclosure) in coreconfigsnapshot.php (aka configuration snapshot page) in Nagios XI before 5.5.4 allows remote attackers to gain access to configuration files containing confidential credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-06-19T17:23:25.000Z
CVE-2018-17150 
Intersystems Cache 2017.2.2.865.0 allows XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T18:40:35.000Z
CVE-2018-17151 
Intersystems Cache 2017.2.2.865.0 has Incorrect Access Control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T18:44:53.000Z
CVE-2018-17152 
Intersystems Cache 2017.2.2.865.0 allows XXE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-07-11T18:42:44.000Z
CVE-2018-17153 
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the device. (Whenever an admin logs into My Cloud, a server-side session is created that is bound to the user's IP address. After the session is created, it is possible to call authenticated CGI modules by sending the cookie username=admin in the HTTP request. The invoked CGI will check if a valid session is present and bound to the user's IP address.) It was found that it is possible for an unauthenticated attacker to create a valid session without a login. The network_mgr.cgi CGI module contains a command called "cgi_get_ipv6" that starts an admin session -- tied to the IP address of the user making the request -- if the additional parameter "flag" with the value "1" is provided. Subsequent invocation of commands that would normally require admin privileges now succeed if an attacker sets the username=admin cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-09-18T00:00:00.000Z
CVE-2018-17154 
In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer dereference can occur. Unprivileged authenticated local users may be able to cause a denial of service.
Problem types: description: Denial of service
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-09-28T13:00:00.000Z
CVE-2018-17155 
In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to userland in the getcontext and swapcontext system calls, small amounts of kernel memory may be disclosed to userland processes. Unprivileged authenticated local users may be able to access small amounts privileged kernel data.
Problem types: description: Kernel memory disclosure
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-09-28T13:00:00.000Z
CVE-2018-17156 
In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an ICMP reply packet when using a non-standard value for the net.inet.icmp.quotelen sysctl.
Problem types: description: Kernel buffer underwrite
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-11-28T16:00:00.000Z
CVE-2018-17157 
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4 request. Unprivileged remote users with access to the NFS server may be able to execute arbitrary code.
Problem types: description: Kernel integer overflow
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-12-04T15:00:00.000Z
CVE-2018-17158 
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request. Unprivileged remote users with access to the NFS server can crash the system by sending a specially crafted NFSv4 request.
Problem types: description: Kernel integer overflow
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-12-04T15:00:00.000Z
CVE-2018-17159 
In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged remote users with access to the NFS server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation.
Problem types: description: Kernel improper bounds checking
Affected products: vendor: FreeBSD
product: FreeBSD
Published: 2018-12-04T15:00:00.000Z