CWE Code: 400
Vulnerability Type: privilege_escalation
CVSS Score: 7.8
CWE Name:  Uncontrolled Resource Consumption
Summary: in freebsd before 11.2-stable(r340854) and 11.2-release-p5, the nfs server lacks a bounds check in the readdirplus nfs request. unprivileged remote users with access to the nfs server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/NONE/COMPLETE
Published Date: 2018-12-04
Last Modified Date: 2018-12-31