FR
Product
FreeBSD
582
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 165Medium 73Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7459 | 6.8 | Aug 6 | In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +15 more |
| CVE-2020-7456 | 6.8 | Jun 9 | In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +12 more |
| CVE-2017-13086 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13084 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13077 | 6.8 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio… Affected: 10; 10.4; 11; 11.1 |
| CVE-2026-101302 | 6.5 | Oct 15 | Remote DoS via receive-side kernel TLS Affected: 15.1-RELEASE before p4; 15.0-RELEASE before p14; 14.5-RELEASE before p1; 14.4-RELEASE before p10 |
| CVE-2026-45259 | 6.5 | Jun 27 | sigqueue(2) missing capability mode restriction Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2026-45254 | 6.5 | May 21 | Incorrect libcap_net limitation list manipulation Affected: 15.0-RELEASE before p9; 14.4-RELEASE before p5; 14.3-RELEASE before p14 |
| CVE-2022-23093 | 6.5 | Feb 15 | ping reads raw IP packets from the network to process responses in the pr_pack() function Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +12 more |
| CVE-2023-6660 | 6.5 | Dec 13 | When a program running on an affected system appends data to a file via an NFS client mount, the bug can cause the NFS client to fail to copy in the data to be written but proceed… Affected: 13.2; 13.2; 13.2; 13.2; 13.2; 13.2; +8 more |
| CVE-2023-5368 | 6.5 | Oct 4 | On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional space in the file with unallocated data from the… Affected: before 12.4; 13.0 before 13.2; 12.4; 12.4; 12.4; 12.4; +6 more |
| CVE-2023-0751 | 6.5 | Feb 8 | When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +12 more |
| CVE-2015-2923 | 6.5 | Feb 20 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setting via a small hop_limit… Affected: before 10.1 |
| CVE-2019-5605 | 6.5 | Jul 26 | In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to… Affected: 11.0; 11.2; 11.2; 11.2; 11.2; 11.2; +8 more |
| CVE-2019-5601 | 6.5 | Jul 3 | In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in the FFS implementation… Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +11 more |
| CVE-2015-5674 | 6.5 | Feb 5 | The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17… Affected: 9.3; 10.1; 10.2 |
| CVE-2015-7973 | 6.5 | Jan 30 | NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured in broadcast mode, allows man-in-the-middle attackers to conduct replay attacks by sniffing the network Affected: 10.0 before 10.1; 9.3; 9.3; 9.3; 9.3; 9.3; +34 more |
| CVE-2024-25940 | 6.3 | Feb 15 | `bhyveload -h <host-path>` may be used to grant loader access to the <host-path> directory tree on the host Affected: before 13.2; 13.3 before 14.0; 13.2; 13.2; 13.2; 13.2; +12 more |
| CVE-2026-6386 | 6.2 | Apr 22 | Missing large page handling in pmap_pkru_update_range() Affected: 15.0-RELEASE before p6; 14.4-RELEASE before p2; 14.3-RELEASE before p11; 13.5-RELEASE before p12 |
| CVE-2016-1885 | 6.2 | Apr 12 | Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause… Affected: 9.3; 10.1; 10.2 |
| CVE-2020-7453 | 6.0 | Apr 29 | In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: through 12.4 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 12.2; 12.2; 12.2 |
| CVE-2019-9494 | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +8 more |
| CVE-2019-6111 | 5.9 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: before 12.0; 12.0; 12.0; 12.0; 12.0 |
| CVE-2018-17156 | 5.9 | Nov 28 | In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwrite could occur when constructing an… Affected: before 11.2; 11.2 |
| CVE-2016-9042 | 5.9 | Jun 4 | An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9 Affected: 10.0; 11.0 |
| CVE-2015-7977 | 5.9 | Jan 30 | ntpd in NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (NULL pointer dereference) via a ntpdc reslist command Affected: 9.3; 9.3; 9.3; 9.3; 9.3; 9.3; +34 more |
| CVE-2018-3665 | 5.6 | Jun 21 | System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another… Affected: 11.0; 11.1; 11.2 |
| CVE-2005-0109 | 5.6 | Mar 5 | Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +34 more |
| CVE-2026-101308 | 5.5 | Oct 15 | TOCTOU race between sound(4) buffer resizing and mmap Affected: 15.1-RELEASE before p5; 14.5-RELEASE before p2; 14.4-RELEASE before p11 |
| CVE-2026-58084 | 5.5 | Aug 19 | Kernel stack disclosure via timer_settime(2) Affected: 15.1-RELEASE before p2; 15.0-RELEASE before p12 |
| CVE-2026-49425 | 5.5 | Aug 19 | Kernel stack disclosure in 32-bit compatibility support Affected: 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-49424 | 5.5 | Aug 19 | Kernel stack disclosure in Linux compatibility layer Affected: 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-45256 | 5.5 | Jun 26 | Missing permission check in thr_kill2(2) Affected: 15.0-RELEASE before p10; 14.4-RELEASE before p6; 14.3-RELEASE before p15 |
| CVE-2026-45252 | 5.5 | May 21 | Heap overflow in FUSE_LISTXATTR Affected: 15.0-RELEASE before p9; 14.4-RELEASE before p5; 14.3-RELEASE before p14 |
| CVE-2023-5370 | 5.5 | Oct 4 | On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized Affected: 13.2 |
| CVE-2021-29626 | 5.5 | Apr 7 | In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9,… Affected: before 11.4; 12.0 before 12.2; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-7463 | 5.5 | Mar 26 | In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +20 more |
| CVE-2020-7462 | 5.5 | Mar 26 | In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +8 more |
| CVE-2020-24863 | 5.5 | Sep 3 | A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an… Affected: through 11.4 |
| CVE-2020-24385 | 5.5 | Sep 3 | In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the… Affected: through 7.0 |
| CVE-2020-13434 | 5.5 | May 24 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c Affected: 11.0 before 11.4; 11.4; 11.4; 12.0; 12.0; 12.0; +18 more |
| CVE-2020-7455 | 5.5 | May 13 | In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +10 more |
| CVE-2019-15877 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller… Affected: 12.1; 12.1; 12.1 |
| CVE-2019-15876 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2019-5595 | 5.5 | Feb 12 | In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from… Affected: FreeBSD 11.2 before 11.2-RELEASE-p9 and 12.0 before 12.0-RELEASE-p3 |
| CVE-2018-6925 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17155 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17154 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer… Affected: before 11.2; 11.1; 11.2 |
The 500 most important CVEs for this product (exploited first, then by severity)