FR
Product
FreeBSD
583
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 74Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2208 | – | Jun 25 | FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by… Affected: 6.3; 6.3; 6.3; 6.3; 6.3; 6.3; +20 more |
| CVE-2009-1935 | – | Jun 18 | Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and… Affected: 6.3; 6.3; 6.3_releng; 6.4; 6.4; 6.4; +9 more |
| CVE-2009-1436 | – | Apr 27 | The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users… Affected: 6.3; 6.3; 6.4; 6.4; 6.4; 7.0; +4 more |
| CVE-2009-1041 | – | Mar 26 | The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +7 more |
| CVE-2009-0641 | – | Feb 20 | sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which… Affected: 7.0; 7.0; 7.0; 7.0-release; 7.0_beta4; 7.0_releng; +2 more |
| CVE-2008-5736 | – | Dec 26 | Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7… Affected: 6.0; 6.3; 6.3; 6.3; 6.3; 6.3; +11 more |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: 0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; 1.2; +34 more |
| CVE-2008-2476 | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… Affected: 6.3; 7.1 |
| CVE-2008-4247 | – | Sep 25 | ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote… Affected: 7.0 |
| CVE-2008-2464 | – | Sep 11 | The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2008-3890 | – | Sep 5 | The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by… Affected: 6.3; 7.0 |
| CVE-2008-3531 | – | Sep 5 | Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1)… Affected: 7.0; 7.1 |
| CVE-2008-3530 | – | Sep 5 | sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an… Affected: 6.3; 7.0; 7.1 |
| CVE-2008-1391 | – | Mar 27 | Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary… Affected: 6.0; 6.0; 6.0; 6.0_p5_release; 7.0; 7.0; +2 more |
| CVE-2008-1215 | – | Mar 9 | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the… Affected: 6.3; 7.0 |
| CVE-2008-0777 | – | Feb 15 | The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents… Affected: 5.5; 6.2; 6.3; 7.0 |
| CVE-2008-0217 | – | Jan 16 | The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as… Affected: 5.0; 5.5; 6.0; 6.1; 6.2; 7.0; +1 more |
| CVE-2008-0216 | – | Jan 16 | The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the… Affected: 6.0; 6.0; 6.0; 6.1; 6.1; 6.1; +7 more |
| CVE-2007-6150 | – | Nov 30 | The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed… Affected: 5.5; 6.1; 6.2; 6.3; 7.0 |
| CVE-2007-3722 | – | Jul 12 | The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial… Affected: All versions, or not specified |
| CVE-2007-3721 | – | Jul 12 | The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2007-0267 | – | Jan 17 | The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by… Affected: 6.1 |
| CVE-2007-0229 | – | Jan 13 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted… Affected: 6.1 |
| CVE-2007-0166 | – | Jan 11 | The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted,… Affected: through 6.2; 5.3 |
| CVE-2006-6397 | – | Dec 8 | Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner Affected: 6.2 |
| CVE-2006-6013 | – | Nov 21 | Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD… Affected: 5.5 |
| CVE-2006-5824 | – | Nov 9 | Integer overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a denial of service (kernel panic) and trigger a heap-based buffer overflow via a crafted… Affected: 6.1 |
| CVE-2006-5680 | – | Nov 9 | The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed… Affected: 6 |
| CVE-2006-5679 | – | Nov 3 | Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS… Affected: 6.1 |
| CVE-2006-5550 | – | Oct 26 | The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto Affected: 6.1; 6.1; 6.1 |
| CVE-2006-5483 | – | Oct 24 | p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be settable by root Affected: 6.1 |
| CVE-2006-5482 | – | Oct 24 | ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is… Affected: 6.1 |
| CVE-2006-4516 | – | Oct 12 | Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large… Affected: 6.0 |
| CVE-2006-4178 | – | Sep 26 | Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via… Affected: through 5.5; 5.2; 5.2.1; 5.3; 5.4 |
| CVE-2006-4172 | – | Sep 26 | Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and… Affected: through 5.5; 5.2; 5.2.1; 5.3; 5.4 |
| CVE-2006-4304 | – | Aug 24 | Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to… Affected: 4.11; 5.3; 5.4; 5.5; 6.0; 6.1 |
| CVE-2006-2655 | – | Jun 2 | The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +9 more |
| CVE-2006-2654 | – | Jun 2 | Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.1; +21 more |
| CVE-2006-1056 | – | Apr 20 | The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP… Affected: All versions, or not specified |
| CVE-2006-1283 | – | Mar 23 | opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1; 2.1.0; 2.1.5; +34 more |
| CVE-2006-0905 | – | Mar 23 | A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security… Affected: 4.8; 4.8; 4.8; 4.8; 4.9; 4.9; +30 more |
| CVE-2006-0883 | – | Mar 7 | OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +2 more |
| CVE-2006-0900 | – | Feb 27 | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite Affected: 6.0 |
| CVE-2006-0433 | – | Feb 2 | Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote… Affected: 5.3; 5.4 |
| CVE-2006-0381 | – | Jan 25 | A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used,… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +3 more |
| CVE-2006-0380 | – | Jan 25 | A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which… Affected: 5.4; 6.0 |
| CVE-2006-0379 | – | Jan 25 | FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory Affected: 5.4; 6.0 |
| CVE-2006-0226 | – | Jan 19 | Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute… Affected: 6.0; 6.0 |
| CVE-2006-0055 | – | Jan 11 | The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary… Affected: 4.10; 4.10; 4.10; 4.10; 4.11; 4.11; +22 more |
| CVE-2005-4351 | – | Dec 31 | The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files… Affected: through 6.0; 7.0 |
The 500 most important CVEs for this product (exploited first, then by severity)