CVE-2018-17154

Published: Sep 28, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer dereference can occur. Unprivileged authenticated local users may be able to cause a denial of service.

Affected (3)

Products: Freebsd: Freebsd

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Before 11.2
Freebsd Freebsd	Version 11.1 p15
Freebsd Freebsd	Version 11.2 p4

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://security.FreeBSD.org/advisories/FreeBSD-EN-18:10.syscall.asc

Source: secteam@freebsd.org

PatchVendor Advisory

https://security.FreeBSD.org/advisories/FreeBSD-EN-18:10.syscall.asc

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.