FR
Product
FreeBSD
583
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 74Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29628 | 7.5 | May 28 | In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call triggering a fault could cause… Affected: 12.2; 12.2; 12.2; 12.2; 12.2; 12.2; +7 more |
| CVE-2020-25584 | 7.5 | Apr 7 | In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser… Affected: before 11.4; 12.0 before 12.2; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25581 | 7.5 | Mar 26 | In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation,… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +6 more |
| CVE-2020-1967 | 7.5 | Apr 21 | Segmentation fault in SSL_check_chain Affected: 12.1 |
| CVE-2012-5365 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router… Affected: before 9.2 |
| CVE-2012-5363 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor… Affected: before 9.2 |
| CVE-2011-3336 | 7.5 | Feb 12 | regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion Affected: 8.2 |
| CVE-2011-2480 | 7.5 | Nov 27 | Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures Affected: before 8.2 |
| CVE-2019-5612 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5611 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5610 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5609 | 7.5 | Aug 30 | In FreeBSD 12.0-STABLE before r350619, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350619, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5599 | 7.5 | Jul 2 | In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attacker to cause several linked lists to grow… Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0 |
| CVE-2019-5598 | 7.5 | May 15 | In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in pf does not check if… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +6 more |
| CVE-2018-17159 | 7.5 | Dec 4 | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request Affected: before 11.2; 11.2 |
| CVE-2018-17158 | 7.5 | Dec 4 | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length field in an NFSv4 request Affected: before 11.2; 11.2 |
| CVE-2017-1084 | 7.5 | Sep 12 | In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page Affected: before 11.2 |
| CVE-2017-1083 | 7.5 | Sep 12 | In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default Affected: before 11.2 |
| CVE-2017-1082 | 7.5 | Sep 12 | In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern Affected: 10.0 through 10.4; 11.0 before 11.1 |
| CVE-2018-6923 | 7.5 | Sep 4 | In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive system resource consumption Affected: 2.2; 3.0; 4.3; 4.4; 4.5; 4.6; +34 more |
| CVE-2017-1081 | 7.5 | Apr 10 | In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially… Affected: through 11.0; 10.3; 10.3; 11.0 |
| CVE-2018-6919 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2018-6918 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2018-6917 | 7.5 | Apr 4 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2015-1417 | 7.5 | Jul 25 | The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEASE-p21, and 8.x before… Affected: 8.4; 8.4; 8.4; 8.4; 8.4; 8.4; +34 more |
| CVE-2016-1888 | 7.5 | Feb 15 | The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of… Affected: 9.3; 10.1; 10.2; 10.3; 11.0 |
| CVE-2016-1882 | 7.5 | Jan 29 | FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9 allow remote attackers to cause a denial of service (kernel crash) via vectors related to creating a TCP connection… Affected: 9.3; 10.1; 10.2 |
| CVE-2016-1879 | 7.5 | Jan 29 | The Stream Control Transmission Protocol (SCTP) module in FreeBSD 9.3 before p33, 10.1 before p26, and 10.2 before p9, when the kernel is configured for IPv6, allows remote… Affected: 9.3; 10.1; 10.2 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-1999-0052 | 7.5 | Nov 4 | IP fragmentation denial of service in FreeBSD allows a remote attacker to cause a crash Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +3 more |
| CVE-2026-58088 | 7.4 | Aug 19 | Race condition in ELF core dump segment counting Affected: 15.1-RELEASE before p2; 15.0-RELEASE before p12; 14.4-RELEASE before p8 |
| CVE-2021-3450 | 7.4 | Mar 25 | CA certificate check bypass with X509_V_FLAG_X509_STRICT Affected: 12.2; 12.2; 12.2 |
| CVE-2019-15879 | 7.4 | May 13 | In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptodev module permitted a data… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +8 more |
| CVE-2019-14899 | 7.4 | Dec 11 | A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is… Affected: All versions, or not specified |
| CVE-2020-7461 | 7.3 | Mar 26 | In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +19 more |
| CVE-2025-14558 | 7.2 | Mar 9 | Remote code execution via ND6 Router Advertisements Affected: 15.0-RELEASE before p1; 14.3-RELEASE before p7; 13.5-RELEASE before p8 |
| CVE-2026-101304 | 7.1 | Oct 15 | Multiple jail filesystem root escapes Affected: 15.1-RELEASE before p4; 15.0-RELEASE before p14; 14.5-RELEASE before p1; 14.4-RELEASE before p10 |
| CVE-2026-49421 | 7.1 | Aug 19 | unlinkat(2) ignores AT_RESOLVE_BENEATH flag Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-49413 | 7.1 | Jun 27 | Flaw in Linuxulator execution of setugid binaries Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2023-5369 | 7.1 | Oct 4 | Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input and output file descriptors, respectively Affected: 13.2 |
| CVE-2018-6924 | 7.1 | Sep 12 | In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF header parser could allow a malicious ELF… Affected: 10.4; 11.2; 11.0 before 11.1 |
| CVE-2026-101311 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-101310 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-101309 | 7.0 | Oct 15 | Multiple vulnerabilities in bhyve device models Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-58100 | 7.0 | Oct 15 | Memory safety bugs in kqueue copy-on-fork implementation Affected: 15.1-RELEASE before p4 |
| CVE-2026-58099 | 7.0 | Oct 15 | Memory safety bugs in kqueue copy-on-fork implementation Affected: 15.1-RELEASE before p4 |
| CVE-2026-58093 | 7.0 | Aug 26 | Kernel use-after-free via tty ioctls Affected: 15.1-RELEASE before p3; 15.0-RELEASE before p13; 14.4-RELEASE before p9 |
| CVE-2026-49417 | 7.0 | Jun 27 | Multiple vulnerabilities in the sound(4) mmap path Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2020-7460 | 7.0 | Aug 6 | In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, the sendmsg system call in the… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +15 more |
| CVE-2008-5162 | 7.0 | Nov 26 | The arc4random function in the kernel in FreeBSD 6.3 through 7.1 does not have a proper entropy source for a short time period immediately after boot, which makes it easier for… Affected: 6.4 before 7.0; 6.3; 6.3; 6.3; 6.3; 6.3; +24 more |
The 500 most important CVEs for this product (exploited first, then by severity)