FR
Product
FreeBSD
583
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 74Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-6921 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel… Affected: 11.0 before 11.1 |
| CVE-2018-6920 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2015-5677 | 5.5 | Feb 7 | bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication… Affected: 9.3; 10.1; 10.2 |
| CVE-2002-1915 | 5.5 | Dec 31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file Affected: 3.5; 3.5.1; 4.0; 4.1; 4.1.1; 4.2; +5 more |
| CVE-1999-0783 | 5.5 | Jun 16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system Affected: 2.2 |
| CVE-2025-24934 | 5.4 | Oct 22 | SO_REUSEPORT_LB breaks connect(2) for UDP sockets Affected: 15.0-BETA2 before p1; 14.3-RELEASE before p5; 13.5-RELEASE before p6 |
| CVE-2024-6759 | 5.3 | Aug 12 | When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separator character, "/" Affected: before 13.0; 13.1 before 13.3; 13.3; 13.3; 13.3; 13.3; +13 more |
| CVE-2023-51765 | 5.3 | Dec 24 | sendmail through 8.17.2 allows SMTP smuggling in certain configurations Affected: before 11.0 |
| CVE-2020-7464 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4)… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +23 more |
| CVE-2020-25580 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +6 more |
| CVE-2020-25579 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25578 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-7451 | 5.3 | Apr 28 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK or challenge TCP-ACK… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2018-6922 | 5.3 | Aug 9 | One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to… Affected: All versions prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, 10.4-RELEASE-p10 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 10; 10.4; 11; 11.1 |
| CVE-2016-2518 | 5.3 | Jan 30 | The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large… Affected: 9.3; 9.3; 9.3; 9.3; 9.3; 9.3; +34 more |
| CVE-2006-0054 | 5.3 | Jan 11 | The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action,… Affected: 6.0 |
| CVE-2022-23089 | 4.7 | Feb 15 | When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1, which is not properly handled Affected: before 12.3; 12.4 before 13.0; 12.3; 12.3; 12.3; 12.3; +27 more |
| CVE-2022-23091 | 4.0 | Feb 15 | A particular case of memory sharing is mishandled in the virtual memory system Affected: before 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +27 more |
The 500 most important CVEs for this product (exploited first, then by severity)