SB2025012967 - Buffer overflow in FreeBSD NFS support

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025012967

SB2025012967 - Buffer overflow in FreeBSD NFS support

Published: January 29, 2025 Updated: July 30, 2026

Security Bulletin ID SB2025012967
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Stack-based buffer overflow (CVE-ID: CVE-2025-0373)

CWE-ID: CWE-121 - Stack-based buffer overflow

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to stack-based buffer overflow in the VOP_VPTOFH() implementation of the cd9660, tarfs, and ext2fs filesystems when handling NFS access to exported filesystems. A remote attacker can mount and access a crafted NFS export to cause a denial of service.

Only 64-bit systems that export a cd9660, tarfs, or ext2fs filesystem via NFS are vulnerable. Further exploitation such as bypassing file permission checks or remote kernel code execution is noted as potentially possible but has not been demonstrated.


Remediation

Install update from vendor's website.

References