CVE-2017-15037

In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause…

published October 5, 2017

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p->t_name strings to lack a final '\0' character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01129 · 65.9th percentile
Published
2017-10-05T07:00Z
EPSS history
Timeline
  • 05 OCT 07:00Z
    In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, because it can cause…
    cvelistv5