FR
Product
FreeBSD
582
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 73Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43102 | 10.0 | Sep 5 | umtx Kernel panic or Use-After-Free Affected: 14.1-RELEASE before p4; 14.0-RELEASE before p10; 13.3-RELEASE before p6 |
| CVE-2018-17160 | 10.0 | Dec 4 | In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can permit a guest operating system to… Affected: before 11.2; 11.2 |
| CVE-2026-101306 | 9.8 | Oct 15 | Multiple jail filesystem root escapes Affected: 15.1-RELEASE before p4; 15.0-RELEASE before p14; 14.5-RELEASE before p1; 14.4-RELEASE before p10 |
| CVE-2026-58082 | 9.8 | Aug 19 | Stack based buffer overflow in iconv(3) Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-58081 | 9.8 | Aug 19 | Heap based buffer overflow in iconv(3) Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2024-29937 | 9.8 | Apr 11 | NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to… Affected: 14.0 |
| CVE-2022-23088 | 9.8 | Feb 15 | The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer Affected: before 12.3; 12.4 before 13.0; 12.3; 12.3; 12.3; 12.3; +23 more |
| CVE-2023-5941 | 9.8 | Nov 8 | In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush() stdio function in libc does not correctly update FILE… Affected: before 12.4; 13.0 before 13.2; 12.4; 12.4; 12.4; 12.4; +10 more |
| CVE-2023-3326 | 9.8 | Jun 22 | pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distribution Center) over the… Affected: before 12.4; 13.0 before 13.1; 12.4; 12.4; 12.4; 12.4; +13 more |
| CVE-2020-25583 | 9.8 | Mar 29 | In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option,… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +23 more |
| CVE-2020-25577 | 9.8 | Mar 29 | In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does not verify that the… Affected: 11.4; 11.4; 11.4; 11.4; 12.1; 12.1; +9 more |
| CVE-2020-7458 | 9.8 | Jul 9 | In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to… Affected: 11.4; 11.4; 12.1 |
| CVE-2020-7454 | 9.8 | May 13 | In FreeBSD 12.1-STABLE before r360971, 12.1-RELEASE before p5, 11.4-STABLE before r360971, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, libalias does not properly validate… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +10 more |
| CVE-2019-15880 | 9.8 | May 13 | In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffer based on a user-supplied… Affected: 12.1; 12.1; 12.1; 12.1; 12.1 |
| CVE-2019-5614 | 9.8 | Apr 29 | In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +6 more |
| CVE-2019-15874 | 9.8 | Apr 29 | In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incomplete packet data validation… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +6 more |
| CVE-2014-3879 | 9.8 | Feb 18 | OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a policy that does not exist, which causes the loaded policy… Affected: through 9.2 |
| CVE-2020-7450 | 9.8 | Feb 18 | In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +14 more |
| CVE-2019-5613 | 9.8 | Feb 18 | In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint Affected: 12.0; 12.0; 12.0; 12.0; 12.0; 12.0; +6 more |
| CVE-2019-5608 | 9.8 | Aug 30 | In FreeBSD 12.0-STABLE before r350648, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350650, 11.3-RELEASE before 11.3-RELEASE-p2, and 11.2-RELEASE before… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2019-5600 | 9.8 | Jul 3 | In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11,… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +12 more |
| CVE-2019-12900 | 9.8 | Jun 19 | BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +18 more |
| CVE-2018-17161 | 9.8 | Jan 3 | In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provided data in bootpd may make it possible… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +1 more |
| CVE-2018-17157 | 9.8 | Dec 4 | In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sending a specially crafted NFSv4… Affected: before 11.2; 11.2 |
| CVE-2016-6559 | 9.8 | Jul 13 | Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory Affected: 9.3; 10.1; 10.2; 10.3; 11.0 |
| CVE-2018-6916 | 9.8 | Mar 9 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host Affected: 11.0 before 11.1; 10.3; 10.4; 10.4 |
| CVE-2018-7183 | 9.8 | Mar 8 | Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a… Affected: 10.3; 10.4; 11.1 |
| CVE-2007-3798 | 9.8 | Jul 16 | Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an… Affected: 5.0 before 5.5; 6.0 before 6.1; 5.5; 5.5; 5.5; 5.5; +28 more |
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 4.0 through 5.0 |
| CVE-2002-0391 | 9.8 | Aug 12 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to… Affected: through 4.6.1 |
| CVE-2001-1155 | 9.8 | Aug 23 | TCP Wrappers (tcp_wrappers) in FreeBSD 4.1.1 through 4.3 with the PARANOID ACL option enabled does not properly check the result of a reverse DNS lookup, which could allow remote… Affected: 4.1.1 through 4.3 |
| CVE-2019-5604 | 9.6 | Jul 26 | In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before… Affected: 11.0; 11.2; 11.2; 11.2; 11.2; 11.2; +16 more |
| CVE-2026-101307 | 9.1 | Oct 15 | Remotely triggerable buffer overflow in tcp_rack Affected: 15.1-RELEASE before p5 |
| CVE-2020-7452 | 9.1 | Apr 29 | In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE before 11.3-RELEASE-p7, incorrect use of a user-controlled… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2019-5597 | 9.1 | May 15 | In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a bug in the pf IPv6 fragment reassembly… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +5 more |
Showing 35
The 500 most important CVEs for this product (exploited first, then by severity)