OP
Product
OpenBSD
203
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 11High 23Medium 23Low 1
Watch
Add OpenBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2001-1559 | 5.5 | Dec 31 | The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local… Affected: 2.9; 3.0 |
| CVE-2026-56101 | 5.3 | Sep 8 | OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS Affected: before 1ee99dfcc4ddc87afc6395d5d3094e9d2314fb5a |
| CVE-2026-56099 | 5.3 | Jun 18 | OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input Affected: before 2026-06-18 |
| CVE-2022-48437 | 5.3 | Apr 12 | An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001 Affected: before 7.2 |
| CVE-2020-26142 | 5.3 | May 11 | An issue was discovered in the kernel in OpenBSD 6.6 Affected: 6.6 |
| CVE-2016-6246 | 4.4 | Mar 7 | OpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial of service (kernel panic) by mounting a tmpfs with a VNOVAL in the (1) username,… Affected: 5.8; 5.9 |
| CVE-2026-41285 | 4.3 | Apr 20 | In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero,… Affected: through 7.8 |
| CVE-2021-35000 | 3.3 | May 7 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability Affected: 6.9 |
| CVE-2014-7250 | – | Dec 12 | The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers… Affected: 3.6 |
| CVE-2011-2895 | – | Aug 19 | The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in… Affected: through 3.7; 2.0; 2.1; 2.2; 2.3; 2.4; +12 more |
| CVE-2011-2168 | – | May 24 | Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string,… Affected: through 4.8; 2.0; 2.1; 2.2; 2.3; 2.4; +23 more |
| CVE-2011-0419 | – | May 16 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18,… Affected: 4.8 |
| CVE-2011-1013 | – | May 9 | Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2)… Affected: through 4.8 |
| CVE-2010-4754 | – | Mar 2 | The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a… Affected: 4.7 |
| CVE-2010-4755 | – | Mar 2 | The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and… Affected: 4.7 |
| CVE-2009-3572 | – | Oct 6 | OpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM exceptions, which allows local users to cause a denial of service (kernel panic) via… Affected: 4.4; 4.5; 4.6 |
| CVE-2009-0687 | – | Aug 11 | The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote… Affected: 4.2; 4.3; 4.4; 4.5 |
| CVE-2009-0689 | – | Jul 1 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating… Affected: 4.5 |
| CVE-2009-0537 | – | Mar 9 | Integer overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2) Microsoft Interix 6.0 build 10.0.6030.0 allows context-dependent attackers to… Affected: through 4.4; 2.0; 2.1; 2.2; 2.3; 2.4; +19 more |
| CVE-2009-0780 | – | Mar 4 | The aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers to cause a denial of service (application crash) via an Autonomous System (AS)… Affected: 4.3; 4.4 |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +18 more |
| CVE-2008-2476 | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… Affected: 4.2; 4.3 |
| CVE-2008-4247 | – | Sep 25 | ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote… Affected: 4.3 |
| CVE-2008-1215 | – | Mar 9 | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the… Affected: 4.1; 4.2 |
| CVE-2008-1058 | – | Feb 28 | The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets Affected: 4.1; 4.2 |
| CVE-2008-1057 | – | Feb 28 | The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers Affected: 4.2 |
| CVE-2007-6700 | – | Feb 5 | Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to inject arbitrary web script or HTML… Affected: 4.1 |
| CVE-2008-0384 | – | Jan 22 | OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not have a route label, which triggers a… Affected: 4.2 |
| CVE-2007-5365 | – | Oct 11 | Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote… Affected: 4.0; 4.1; 4.2 |
| CVE-2007-1352 | – | Apr 6 | Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the… Affected: 3.9; 4.0 |
| CVE-2007-1351 | – | Apr 6 | Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier allows remote authenticated users to… Affected: 3.9; 4.0 |
| CVE-2007-1365 | – | Mar 10 | Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets due to "incorrect mbuf handling for ICMP6… Affected: 3.9; 4.0 |
| CVE-2007-0343 | – | Jan 18 | OpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via certain IPv6 ICMP (aka ICMP6) echo request packets Affected: through 4.0 |
| CVE-2007-0085 | – | Jan 5 | Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP option and a non-AGP… Affected: 3.9; 4.0 |
| CVE-2006-6730 | – | Dec 26 | OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by… Affected: All versions, or not specified |
| CVE-2006-6397 | – | Dec 8 | Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner Affected: All versions, or not specified |
| CVE-2006-6164 | – | Nov 29 | The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous… Affected: 3.9; 4.0 |
| CVE-2006-5550 | – | Oct 26 | The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto Affected: 4.0 |
| CVE-2006-5218 | – | Oct 10 | Integer overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and NetBSD 3 allows local users to cause a denial of service (crash), gain… Affected: 3.8; 3.9 |
| CVE-2006-4436 | – | Aug 29 | isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA… Affected: 3.8; 3.9 |
| CVE-2006-4435 | – | Aug 29 | OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel panic) by allocating more semaphores than the default Affected: 3.8; 3.9 |
| CVE-2006-4304 | – | Aug 24 | Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to… Affected: 3.8; 3.9 |
| CVE-2006-0098 | – | Jan 6 | The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using… Affected: 3.7; 3.8 |
| CVE-2005-4351 | – | Dec 31 | The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files… Affected: through 3.8 |
| CVE-2005-0356 | – | May 31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service… Affected: 3.0; 3.1; 3.2; 3.3; 3.4; 3.5; +1 more |
| CVE-2005-0960 | – | May 2 | Multiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c OpenBSD 3.5 and 3.6 allow remote attackers to cause a denial of service (memory… Affected: 3.5; 3.6 |
| CVE-2005-0637 | – | May 2 | The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and… Affected: 3.5; 3.6 |
| CVE-2005-0740 | – | Jan 13 | The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values in the TCP timestamp option, which causes… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +11 more |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 3.4; 3.5; current |
| CVE-2004-2163 | – | Dec 31 | login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass… Affected: 3.2; 3.4; 3.5 |