NE
Product
Netbsd
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 1
Watch
Add Netbsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1000378 | 9.8 | Jun 19 | The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse… Affected: through 7.1 |
| CVE-2017-1000375 | 9.8 | Jun 19 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary… Affected: through 7.1 |
| CVE-2017-1000374 | 9.8 | Jun 19 | A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries Affected: through 7.1 |
| CVE-2015-8212 | 9.8 | Jan 19 | CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +8 more |
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 1.5 through 1.6.1 |
| CVE-2024-6387 | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos Affected: through 10.0.0 |
| CVE-2016-6253 | 7.8 | Jan 20 | mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +8 more |
| CVE-2006-6165 | 7.8 | Nov 29 | ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing… Affected: 2.0.4 |
| CVE-2021-45489 | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG Affected: through 9.2 |
| CVE-2021-45488 | 7.5 | Dec 25 | In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm Affected: through 9.2 |
| CVE-2021-45487 | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures Affected: through 9.2 |
| CVE-2021-45484 | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG Affected: through 9.2 |
| CVE-2012-5365 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router… Affected: before 6.0.2 |
| CVE-2012-5363 | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor… Affected: before 6.0.2 |
| CVE-2011-2480 | 7.5 | Nov 27 | Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures Affected: All versions, or not specified |
| CVE-2002-1915 | 5.5 | Dec 31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file Affected: 1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +9 more |
| CVE-1999-0011 | 5.4 | Apr 8 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer Affected: 1.3; 1.3.1 |
| CVE-2020-26139 | 5.3 | May 11 | An issue was discovered in the kernel in NetBSD 7.1 Affected: 7.1 |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 5.1; 5.1.1; 5.1.2; 5.1.3; 5.1.4; 5.2; +16 more |
| CVE-2014-7250 | – | Dec 12 | The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers… Affected: 2.0 |
| CVE-2014-8517 | – | Nov 17 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to… Affected: 5.1; 5.1.1; 5.1.2; 5.1.3; 5.1.4; 5.2; +15 more |
| CVE-2014-5384 | – | Aug 21 | The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a… Affected: All versions, or not specified |
| CVE-2014-3951 | – | Aug 21 | The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a… Affected: All versions, or not specified |
| CVE-2014-5015 | – | Jul 24 | bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP… Affected: 5.1; 5.2; 6.0; 6.1 |
| CVE-2007-6754 | – | Jul 25 | The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes it easier for context-dependent… Affected: All versions, or not specified |
| CVE-2006-7252 | – | Jul 25 | Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-dependent attackers to perform… Affected: All versions, or not specified |
| CVE-2012-0217 | – | Jun 12 | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos… Affected: through 6.0 |
| CVE-2011-2393 | – | Feb 2 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial… Affected: All versions, or not specified |
| CVE-2011-2895 | – | Aug 19 | The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in… Affected: All versions, or not specified |
| CVE-2011-0418 | – | May 24 | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated… Affected: 5.1 |
| CVE-2011-1920 | – | May 23 | The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a… Affected: through 1.6.1; 1.0; 1.1; 1.2; 1.2.1; 1.3; +12 more |
| CVE-2011-0419 | – | May 16 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18,… Affected: 5.1 |
| CVE-2011-1547 | – | May 9 | Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of… Affected: 4.0; 5.0; 5.0.1; 5.0.2; 5.1 |
| CVE-2010-4754 | – | Mar 2 | The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a… Affected: 5.0.2 |
| CVE-2010-4755 | – | Mar 2 | The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and… Affected: 5.0.2 |
| CVE-2010-2530 | – | Sep 29 | Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of… Affected: through 5.0.2; 0.8; 0.9; 1.0; 1.1; 1.2; +34 more |
| CVE-2010-3014 | – | Aug 20 | The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via… Affected: All versions, or not specified |
| CVE-2010-0561 | – | Feb 8 | Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number… Affected: 4.0; 5.0 |
| CVE-2009-2793 | – | Sep 18 | The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain… Affected: through 5.0.1; 0.8; 0.9; 1.0; 1.1; 1.2; +24 more |
| CVE-2009-0687 | – | Aug 11 | The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote… Affected: 5.0 |
| CVE-2009-2483 | – | Jul 16 | libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized… Affected: 4.0; 4.0.1 |
| CVE-2009-2482 | – | Jul 16 | The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are… Affected: 4.0; 4.0; 4.0; 4.0.1; 4.1; 5.0; +1 more |
| CVE-2009-0689 | – | Jul 1 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating… Affected: 5.0 |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: 1.0; 1.1; 1.2; 1.2.1; 1.3; 1.3.1; +26 more |
| CVE-2008-2476 | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… Affected: All versions, or not specified |
| CVE-2008-4247 | – | Sep 25 | ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote… Affected: 4.0 |
| CVE-2008-3584 | – | Sep 11 | NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service… Affected: 3.0; 3.1; 4.0 |
| CVE-2008-2464 | – | Sep 11 | The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service… Affected: 4.0 |
| CVE-2008-1391 | – | Mar 27 | Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary… Affected: 4.0 |
| CVE-2008-1335 | – | Mar 13 | The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass… Affected: 2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.1; +7 more |