FR
Product
FreeBSD
583
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 74Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-2359 | – | Aug 5 | The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the… Affected: 5.3; 5.4 |
| CVE-2005-2218 | – | Jul 26 | The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers,… Affected: 5.0; 5.0; 5.0; 5.0; 5.1; 5.1; +15 more |
| CVE-2005-2068 | – | Jul 5 | FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +14 more |
| CVE-2005-2019 | – | Jul 5 | ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain… Affected: 5.4 |
| CVE-2005-0356 | – | May 31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +34 more |
| CVE-2005-1406 | – | May 6 | The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow… Affected: 4.1; 4.2; 4.3; 4.4; 4.5; 4.6; +9 more |
| CVE-2005-1400 | – | May 6 | The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values Affected: 4.7; 4.8; 4.9; 4.10; 4.11; 5.1; +3 more |
| CVE-2005-1399 | – | May 6 | FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on… Affected: 4.6; 4.7; 4.8; 4.9; 4.10; 4.11; +4 more |
| CVE-2005-0988 | – | May 2 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-0708 | – | May 2 | The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-1126 | – | Apr 15 | The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-0610 | – | Apr 12 | Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2004-1066 | – | Jan 10 | The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows… Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +17 more |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +34 more |
| CVE-2004-0919 | – | Dec 31 | The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates Affected: 5.0; 5.0; 5.0; 5.0; 5.1; 5.1; +6 more |
| CVE-2004-0618 | – | Dec 6 | FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument Affected: 4.10; 5.1; 5.1; 5.1; 5.1; 5.1; +1 more |
| CVE-2004-0602 | – | Dec 6 | The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges… Affected: 4.0; 5.0 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-2004-0435 | – | Aug 18 | Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache… Affected: 4.0; 4.8; 4.8; 4.8; 4.8; 4.9; +8 more |
| CVE-2004-0125 | – | Aug 6 | The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2004-0370 | – | May 4 | The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read… Affected: 5.2 |
| CVE-2004-0126 | – | Mar 29 | The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local… Affected: 5.1; 5.1; 5.2; 5.2.1 |
| CVE-2004-0171 | – | Mar 15 | FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large… Affected: 4.6.2; 4.7; 4.8; 4.9; 5.0; 5.1; +1 more |
| CVE-2004-0114 | – | Mar 3 | The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a… Affected: through 5.2 |
| CVE-2004-0099 | – | Mar 3 | mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly… Affected: 5.1; 5.2.1 |
| CVE-2004-0002 | – | Mar 3 | The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large… Affected: 3.0; 3.0; 3.1; 3.2; 3.3; 3.4; +34 more |
| CVE-2003-1234 | – | Dec 31 | Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple… Affected: 1.1.5.1; 2.1.0; 2.1.5; 2.1.6; 2.1.6.1; 2.1.7; +34 more |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 4.4; 4.5; 4.6; 4.6.2; 4.7; 4.8; +2 more |
| CVE-2003-0804 | – | Nov 17 | The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of… Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +8 more |
| CVE-2003-0688 | – | Oct 20 | The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a… Affected: 4.6; 4.7; 4.8; 5.0 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 3.0; 4.0; 4.3; 4.3; 4.4; 4.4; +13 more |
| CVE-2003-0144 | – | Mar 31 | Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain… Affected: 2.2; 2.2.2; 2.2.3; 2.2.4; 2.2.5; 2.2.6 |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 4.0; 4.1; 4.1.1; 4.1.1; 4.1.1; 4.2; +17 more |
| CVE-2003-0078 | – | Mar 3 | ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an… Affected: 4.2; 4.3; 4.4; 4.5; 4.6; 4.7; +1 more |
| CVE-2003-0015 | – | Feb 7 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as… Affected: 4.4; 4.5; 4.6; 4.7; 5.0 |
| CVE-2003-0001 | – | Jan 17 | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or… Affected: 4.2; 4.3; 4.4; 4.5; 4.6; 4.7 |
| CVE-2002-2092 | – | Dec 31 | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process… Affected: 2.0; 2.1.0; 2.2; 2.2.2; 2.2.3; 2.2.4; +24 more |
| CVE-2002-1674 | – | Dec 31 | procfs on FreeBSD before 4.5 allows local users to cause a denial of service (kernel panic) by removing a file that the fstatfs function refers to Affected: 4.1; 4.1.1; 4.2; 4.3; 4.4; 4.5 |
| CVE-2002-1669 | – | Dec 31 | pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package… Affected: 4.2; 4.3; 4.4 |
| CVE-2002-1667 | – | Dec 31 | The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to… Affected: 4.5; 4.5 |
| CVE-2002-1221 | – | Nov 29 | BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND… Affected: 4.4; 4.5; 4.6; 4.7 |
| CVE-2002-1220 | – | Nov 29 | BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT… Affected: 4.4; 4.5; 4.6; 4.7 |
| CVE-2002-1219 | – | Nov 29 | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server… Affected: 4.4; 4.5; 4.6; 4.7 |
| CVE-2002-0666 | – | Nov 4 | IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service… Affected: 4.6; 4.6; 4.6 |
| CVE-2002-1125 | – | Sep 24 | FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors… Affected: 4.2; 4.3; 4.4; 4.5; 4.6 |
| CVE-2002-0973 | – | Sep 24 | Integer signedness error in several system calls for FreeBSD 4.6.1 RELEASE-p10 and earlier may allow attackers to access sensitive kernel memory via large negative values to the… Affected: 4.0; 4.1; 4.1.1; 4.1.1; 4.1.1; 4.2; +12 more |
| CVE-2002-0831 | – | Aug 12 | The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an… Affected: 4.3; 4.4; 4.5; 4.6; 4.6 |
| CVE-2002-0830 | – | Aug 12 | Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of… Affected: through 4.6.1 |
| CVE-2002-0829 | – | Aug 12 | Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges… Affected: through 4.6.1 |
The 500 most important CVEs for this product (exploited first, then by severity)