FR
Product
FreeBSD
594
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 82Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-8117 | – | Dec 17 | softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors Affected: All versions, or not specified |
| CVE-2014-8116 | – | Dec 17 | The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section… Affected: All versions, or not specified |
| CVE-2014-7250 | – | Dec 12 | The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers… Affected: 5.4 |
| CVE-2014-8475 | – | Nov 18 | FreeBSD 9.1, 9.2, and 10.0, when compiling OpenSSH with Kerberos support, uses incorrect library ordering when linking sshd, which causes symbols to be resolved incorrectly and… Affected: 9.1; 9.2; 10.0 |
| CVE-2014-8476 | – | Nov 13 | The setlogin function in FreeBSD 8.4 through 10.1-RC4 does not initialize the buffer used to store the login name, which allows local users to obtain sensitive information from… Affected: 8.4; 9.0; 9.0; 9.0; 9.1; 9.2; +7 more |
| CVE-2014-3955 | – | Oct 27 | routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from a source not on a directly… Affected: 8.4; 9.0; 9.0; 9.0; 9.0; 9.1; +15 more |
| CVE-2014-3954 | – | Oct 27 | Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted… Affected: 9.1; 9.1; 9.1; 9.2; 9.2; 9.2; +10 more |
| CVE-2014-3711 | – | Oct 27 | namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to look up a large… Affected: 9.1; 9.1; 9.1; 9.2; 9.2; 9.2; +10 more |
| CVE-2014-5384 | – | Aug 21 | The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a… Affected: 10.0 |
| CVE-2014-3951 | – | Aug 21 | The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a… Affected: 10.0 |
| CVE-2014-3953 | – | Jul 15 | FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize certain data structures, which allows local users to obtain sensitive… Affected: 8.4; 9.1; 9.2; 10.0 |
| CVE-2014-3952 | – | Jul 15 | FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows… Affected: 8.4; 9.1; 9.2; 10.0 |
| CVE-2014-3880 | – | Jun 10 | The (1) execve and (2) fexecve system calls in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 10.0 before p4 destroys the virtual memory address space and… Affected: 8.4; 9.1; 9.2; 10.0 |
| CVE-2014-3873 | – | Jun 10 | The ktrace utility in the FreeBSD kernel 8.4 before p11, 9.1 before p14, 9.2 before p7, and 9.3-BETA1 before p1 uses an incorrect page fault kernel trace entry size, which allows… Affected: 8.4; 9.1; 9.2; 9.3 |
| CVE-2014-3956 | – | Jun 4 | The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local… Affected: through 9.2 |
| CVE-2014-3001 | – | May 2 | The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions… Affected: 10.0 |
| CVE-2014-3000 | – | May 2 | The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a… Affected: 8.3; 8.4; 9.1; 9.2; 10.0 |
| CVE-2014-1453 | – | Apr 16 | The NFS server (nfsserver) in FreeBSD 8.3 through 10.0 does not acquire locks in the proper order when converting a directory file handle to a vnode, which allows remote… Affected: 8.3; 8.4; 9.0; 9.0; 9.0; 9.0; +8 more |
| CVE-2014-1452 | – | Jan 21 | Stack-based buffer overflow in lib/snmpagent.c in bsnmpd, as used in FreeBSD 8.3 through 10.0, allows remote attackers to cause a denial of service (daemon crash) and possibly… Affected: 8.3; 8.4; 9.0; 9.1; 9.1; 9.1; +5 more |
| CVE-2013-6834 | – | Nov 21 | The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain… Affected: through 10.0; 0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; +34 more |
| CVE-2013-6833 | – | Nov 21 | The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain… Affected: through 10.0; 0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; +34 more |
| CVE-2013-6832 | – | Nov 21 | The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows… Affected: through 10.0; 0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; +34 more |
| CVE-2013-0211 | – | Sep 30 | Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows… Affected: 9.3 |
| CVE-2013-5710 | – | Sep 23 | The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions to bypass access restrictions via a… Affected: 8.0; 8.3; 8.4; 9.0; 9.1; 9.2 |
| CVE-2013-5666 | – | Sep 23 | The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to… Affected: 9.2; 9.2 |
| CVE-2013-5691 | – | Sep 23 | The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK… Affected: 8.3; 9.0; 9.1; 9.2 |
| CVE-2013-5209 | – | Aug 29 | The sctp_send_initiate_ack function in sys/netinet/sctp_output.c in the SCTP implementation in the kernel in FreeBSD 8.3 through 9.2-PRERELEASE does not properly initialize the… Affected: 8.3; 9.0; 9.1; 9.1; 9.1; 9.2 |
| CVE-2013-3077 | – | Aug 28 | Multiple integer overflows in the IP_MSFILTER and IPV6_MSFILTER features in (1) sys/netinet/in_mcast.c and (2) sys/netinet6/in6_mcast.c in the multicast implementation in the… Affected: 8.3; 9.0; 9.1; 9.1; 9.1; 9.2 |
| CVE-2013-4851 | – | Jul 29 | The vfs_hang_addrlist function in sys/kern/vfs_export.c in the NFS server implementation in the kernel in FreeBSD 8.3 and 9.x through 9.1-RELEASE-p5 controls authorization for… Affected: 8.3; 9.0; 9.1; 9.1; 9.1 |
| CVE-2013-4854 | – | Jul 29 | The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and… Affected: 8.0; 8.1; 8.2; 8.3; 8.4; 9.0; +6 more |
| CVE-2013-2171 | – | Jul 2 | The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have… Affected: 9.0; 9.1; 9.1 |
| CVE-2013-3266 | – | May 2 | The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a… Affected: 8.0; 8.1; 8.2; 8.3; 9.0; 9.1 |
| CVE-2012-3549 | – | Oct 9 | The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a crafted ASCONF chunk Affected: 8.2 |
| CVE-2007-6754 | – | Jul 25 | The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes it easier for context-dependent… Affected: 6.4 |
| CVE-2006-7252 | – | Jul 25 | Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-dependent attackers to perform… Affected: 6.4 |
| CVE-2012-2143 | – | Jul 5 | The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if… Affected: through 9.0; 1.0; 1.1; 1.1.5; 1.1.5.1; 2.0; +34 more |
| CVE-2012-0217 | – | Jun 12 | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos… Affected: through 9.0 |
| CVE-2011-2393 | – | Feb 2 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial… Affected: All versions, or not specified |
| CVE-2011-4862 | – | Dec 25 | Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU… Affected: 7.3 through 9.0 |
| CVE-2011-4122 | – | Nov 17 | Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a Affected: 8.1 |
| CVE-2011-4062 | – | Oct 18 | Buffer overflow in the kernel in FreeBSD 7.3 through 9.0-RC1 allows local users to cause a denial of service (panic) or possibly gain privileges via a bind system call with a long… Affected: 7.3; 7.4; 8.1; 8.2; 9.0; 9.0; +1 more |
| CVE-2011-2895 | – | Aug 19 | The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in… Affected: All versions, or not specified |
| CVE-2011-0419 | – | May 16 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18,… Affected: All versions, or not specified |
| CVE-2011-1739 | – | May 3 | The makemask function in mountd.c in mountd in FreeBSD 7.4 through 8.2 does not properly handle a -network field specifying a CIDR block with a prefix length that is not an… Affected: 7.4; 8.0; 8.1; 8.2 |
| CVE-2011-1074 | – | Mar 4 | crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a… Affected: All versions, or not specified |
| CVE-2011-1073 | – | Mar 4 | crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary… Affected: All versions, or not specified |
| CVE-2010-4755 | – | Mar 2 | The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and… Affected: 7.3; 8.1 |
| CVE-2010-4754 | – | Mar 2 | The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a… Affected: 7.3; 8.1 |
| CVE-2010-2530 | – | Sep 29 | Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of… Affected: All versions, or not specified |
| CVE-2010-3014 | – | Aug 20 | The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)