CVE-2018-17154

In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer dereference can occur. Unprivileged authenticated local users may be able to cause a denial of service.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secteam@freebsd.org

Published

2018-09-28

Last modified

2024-09-16

Weaknesses

CWE-476

Affected products

• Freebsd (Freebsd)

References

• https://security.FreeBSD.org/advisories/FreeBSD-EN-18:10.syscall.asc