FR
Product
FreeBSD
586
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 77Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3038 | 7.5 | Mar 9 | Local DoS and possible privilege escalation via routing sockets Affected: 15.0-RELEASE before p4; 14.3-RELEASE before p9; 13.5-RELEASE before p10; 14.4-RC1 |
| CVE-2026-2261 | 7.5 | Mar 9 | blocklistd(8) socket leak Affected: 15.0-RELEASE before p3 |
| CVE-2025-15576 | 7.5 | Mar 9 | Jail chroot escape via fd exchange with a different jail Affected: 14.3-RELEASE before p9; 13.5-RELEASE before p10 |
| CVE-2025-14769 | 7.5 | Mar 9 | ipfw denial of service Affected: 14.3-RELEASE before p7; 13.5-RELEASE before p8 |
| CVE-2024-45287 | 7.5 | Sep 5 | Multiple vulnerabilities in libnv Affected: 14.1-RELEASE before p4; 14.0-RELEASE before p10; 13.3-RELEASE before p6 |
| CVE-2024-6760 | 7.5 | Aug 12 | A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect… Affected: before 13.0; 13.1 before 13.3; 13.3; 13.3; 13.3; 13.3; +13 more |
| CVE-2022-23084 | 7.5 | Feb 15 | The total size of the user-provided nmreq to nmreq_copyin() was first computed and then trusted during the copyin Affected: 12.0 before 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +22 more |
| CVE-2023-6534 | 7.5 | Dec 13 | In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-RELEASE before 12.4-RELEASE-p9, the pf(4) packet filter… Affected: 12.4; 12.4; 12.4; 12.4; 12.4; 12.4; +17 more |
| CVE-2023-5978 | 7.5 | Nov 8 | In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrectly validates that updated constraints are strictly… Affected: 13.0 before 13.2; 13.2; 13.2; 13.2; 13.2; 13.2 |
| CVE-2023-4809 | 7.5 | Sep 6 | In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed Affected: before 12.4; 13.0 before 13.2; 12.4; 12.4; 12.4; 12.4; +6 more |
| CVE-2023-3107 | 7.5 | Aug 1 | A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field Affected: 12.4; 12.4; 12.4; 12.4; 12.4; 12.4; +14 more |
| CVE-2022-32264 | 7.5 | Sep 6 | sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connections Affected: before 7.0 |
| CVE-2021-29632 | 7.5 | Jan 18 | In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the… Affected: 12.2; 12.2; 12.2; 12.2; 12.2; 12.2; +24 more |
| CVE-2020-7469 | 7.5 | Jun 4 | In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +13 more |
| CVE-2021-29629 | 7.5 | May 28 | In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +20 more |
| CVE-2021-29628 | 7.5 | May 28 | In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause… Affected: 12.2; 12.2; 12.2; 12.2; 12.2; 12.2; +7 more |
| CVE-2020-25584 | 7.5 | Apr 7 | In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser… Affected: before 11.4; 12.0 before 12.2; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25581 | 7.5 | Mar 26 | In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation,… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +6 more |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: 12.1 |
| CVE-2012-5365 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router… Affected: before 9.2 |
| CVE-2012-5363 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor… Affected: before 9.2 |
| CVE-2011-3336 | 7.5 | Feb 12 | regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion Affected: 8.2 |
| CVE-2011-2480 | 7.5 | Nov 27 | Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures Affected: before 8.2 |
| CVE-2019-5612 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5611 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5610 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5609 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5599 | 7.5 | Jul 2 | In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow… Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0 |
| CVE-2019-5598 | 7.5 | May 15 | In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +6 more |
| CVE-2018-17159 | 7.5 | Dec 4 | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request Affected: before 11.2; 11.2 |
| CVE-2018-17158 | 7.5 | Dec 4 | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request Affected: before 11.2; 11.2 |
| CVE-2017-1084 | 7.5 | Sep 12 | In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page Affected: before 11.2 |
| CVE-2017-1083 | 7.5 | Sep 12 | In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default Affected: before 11.2 |
| CVE-2017-1082 | 7.5 | Sep 12 | In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern Affected: 10.0 through 10.4; 11.0 before 11.1 |
| CVE-2018-6923 | 7.5 | Sep 4 | In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption Affected: 2.2; 3.0; 4.3; 4.4; 4.5; 4.6; +34 more |
| CVE-2017-1081 | 7.5 | Apr 10 | In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially… Affected: through 11.0; 10.3; 10.3; 11.0 |
| CVE-2018-6919 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2018-6918 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2018-6917 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2015-1417 | 7.5 | Jul 25 | The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before… Affected: 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +34 more |
| CVE-2016-1888 | 7.5 | Feb 15 | The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of… Affected: 9.3; 10.1; 10.2; 10.3; 11.0 |
| CVE-2016-1882 | 7.5 | Jan 29 | FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection… Affected: 9.3; 10.1; 10.2 |
| CVE-2016-1879 | 7.5 | Jan 29 | The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote… Affected: 9.3; 10.1; 10.2 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-1999-0052 | 7.5 | Nov 4 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +3 more |
| CVE-2026-58088 | 7.4 | Aug 19 | Race condition in ELF core dump segment counting Affected: 15.1-RELEASE before p2; 15.0-RELEASE before p12; 14.4-RELEASE before p8 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 12.2; 12.2; 12.2 |
| CVE-2019-15879 | 7.4 | May 13 | In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +8 more |
| CVE-2019-14899 | 7.4 | Dec 11 | A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is… Affected: All versions, or not specified |
| CVE-2020-7461 | 7.3 | Mar 26 | In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +19 more |
The 500 most important CVEs for this product (exploited first, then by severity)