OP
Product
OpenBSD
203
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 11High 23Medium 23Low 1
Watch
Add OpenBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1799 | – | Dec 31 | PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass… Affected: 3.0; 3.1; 3.2; 3.3; 3.4 |
| CVE-2004-2338 | – | Dec 31 | OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass… Affected: 3.3; 3.4 |
| CVE-2004-2230 | – | Dec 31 | Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket Affected: 3.4; 3.5; 3.6 |
| CVE-2004-0257 | – | Nov 23 | OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a… Affected: 3.0; 3.1; 3.2; 3.3; 3.4 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 3.3; 3.4 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 3.3; 3.4 |
| CVE-2004-0688 | – | Oct 20 | Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm… Affected: 3.4; 3.5 |
| CVE-2004-0687 | – | Oct 20 | Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote… Affected: 3.4; 3.5 |
| CVE-2004-0819 | – | Aug 25 | The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause… Affected: 3.2; 3.3; 3.4; 3.5 |
| CVE-2004-0492 | – | Aug 6 | Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute… Affected: 3.4; 3.5 |
| CVE-2004-0418 | – | Aug 6 | serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds"… Affected: 3.4; 3.5 |
| CVE-2004-0417 | – | Aug 6 | Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a… Affected: 3.4; 3.5 |
| CVE-2004-0416 | – | Aug 6 | Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code Affected: 3.4; 3.5 |
| CVE-2004-0414 | – | Aug 6 | CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial… Affected: 3.4; 3.5 |
| CVE-2004-0482 | – | Jul 7 | Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD… Affected: 3.4; 3.5 |
| CVE-2004-0222 | – | May 4 | Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by… Affected: through 3.4 |
| CVE-2004-0221 | – | May 4 | isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which… Affected: through 3.4 |
| CVE-2004-0220 | – | May 4 | isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer… Affected: through 3.4 |
| CVE-2004-0219 | – | May 4 | isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the… Affected: through 3.4 |
| CVE-2004-0218 | – | May 4 | isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the… Affected: through 3.4 |
| CVE-2004-0171 | – | Mar 15 | FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large… Affected: 3.3; 3.4 |
| CVE-2004-0114 | – | Mar 3 | The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a… Affected: through 2.6 |
| CVE-2004-0106 | – | Mar 3 | Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084 Affected: 3.3; 3.4 |
| CVE-2004-0084 | – | Mar 3 | Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute… Affected: 3.3; 3.4 |
| CVE-2004-0083 | – | Mar 3 | Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias)… Affected: 3.3; 3.4 |
| CVE-2004-1082 | – | Feb 3 | mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials Affected: 3.4; 3.5; current |
| CVE-2003-1366 | – | Dec 31 | chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +7 more |
| CVE-2003-0955 | – | Dec 15 | OpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code in 3.4 via a program with an invalid header that is… Affected: 3.3; 3.4 |
| CVE-2003-0804 | – | Nov 17 | The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of… Affected: 3.2; 3.3; 3.4 |
| CVE-2003-0688 | – | Oct 20 | The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a… Affected: 3.2 |
| CVE-2003-0681 | – | Oct 6 | A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has… Affected: 3.2; 3.3 |
| CVE-2002-1420 | – | Apr 11 | Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which… Affected: 3.0; 3.1 |
| CVE-2003-0144 | – | Mar 31 | Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +7 more |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +7 more |
| CVE-2003-0078 | – | Mar 3 | ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an… Affected: 3.1; 3.2 |
| CVE-2002-2280 | – | Dec 31 | syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g Affected: 2.9; 3.0; 3.1; 3.2 |
| CVE-2002-2222 | – | Dec 31 | isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key… Affected: 3.1 |
| CVE-2002-2188 | – | Dec 31 | OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error Affected: 3.0; 3.1 |
| CVE-2002-2180 | – | Dec 31 | The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +6 more |
| CVE-2002-2092 | – | Dec 31 | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +5 more |
| CVE-2002-1345 | – | Dec 23 | Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames… Affected: 3.0 |
| CVE-2002-1221 | – | Nov 29 | BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND… Affected: 3.0; 3.1; 3.2 |
| CVE-2002-1220 | – | Nov 29 | BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT… Affected: 3.0; 3.1; 3.2 |
| CVE-2002-1219 | – | Nov 29 | Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server… Affected: 3.0; 3.1; 3.2 |
| CVE-2002-0766 | – | Aug 12 | OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing… Affected: 2.9; 3.0; 3.1 |
| CVE-2002-0765 | – | Aug 12 | sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password Affected: 3.1 |
| CVE-2002-0514 | – | Aug 12 | PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is… Affected: 3.0 |
| CVE-2002-0414 | – | Aug 12 | KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a… Affected: 2.6; 2.7 |
| CVE-2000-1208 | – | Aug 12 | Format string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd package may allow local users to gain privileges via an improper syslog call that uses… Affected: 2.7 |
| CVE-2002-0701 | – | Jul 23 | ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner… Affected: All versions, or not specified |