CVE-2018-17161

CVE-2018-17161 describes a critical stack buffer overflow vulnerability in the bootpd service of FreeBSD versions prior to 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1. This flaw, stemming from insufficient validation of network-provided data, allows a remote, unauthenticated attacker to craft a malicious bootp packet. Successful exploitation could lead to a Denial of Service or, more critically, remote code execution, as indicated by its CVSS score of 9.8 (Critical). Despite its high severity, there is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Furthermore, the vulnerability has received minimal community discussion or media coverage.