OP
Product
OpenBSD
203
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 11High 23Medium 23Low 1
Watch
Add OpenBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2002-0572 | – | Jul 3 | FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard… Affected: 2.0; 2.1; 2.2; 2.3 |
| CVE-2002-0557 | – | Jul 3 | Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different… Affected: 3.0 |
| CVE-2002-0542 | – | Jul 3 | mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via… Affected: 2.9; 3.0 |
| CVE-2002-0381 | – | Jun 25 | The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass… Affected: All versions, or not specified |
| CVE-2001-1415 | – | Nov 13 | vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes Affected: 2.9; 3.0 |
| CVE-2001-0670 | – | Oct 3 | Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job… Affected: All versions, or not specified |
| CVE-2001-1145 | – | Aug 17 | fts routines in FreeBSD 4.3 and earlier, NetBSD before 1.5.2, and OpenBSD 2.9 and earlier can be forced to change (chdir) into a different directory than intended when the… Affected: through 2.9 |
| CVE-2001-0554 | – | Aug 14 | Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You… Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +3 more |
| CVE-2001-1244 | – | Jul 7 | Multiple TCP implementations could allow remote attackers to cause a denial of service (bandwidth and CPU exhaustion) by setting the maximum segment size (MSS) to a very small… Affected: 2.8; 2.9 |
| CVE-2001-0378 | – | Jun 27 | readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via… Affected: through 2.8 |
| CVE-2001-0402 | – | Jun 18 | IPFilter 3.4.16 and earlier does not include sufficient session information in its cache, which allows remote attackers to bypass access restrictions by sending fragmented packets… Affected: 2.8 |
| CVE-2001-0247 | – | Jun 18 | Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2)… Affected: 2.3; 2.4; 2.5; 2.6; 2.7; 2.8 |
| CVE-2001-1047 | – | Jun 2 | Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file… Affected: 2.6; 2.7; 2.8; 2.9 |
| CVE-2001-0284 | – | May 3 | Buffer overflow in IPSEC authentication mechanism for OpenBSD 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a… Affected: through 2.8 |
| CVE-2001-0268 | – | May 3 | The i386_set_ldt system call in NetBSD 1.5 and earlier, and OpenBSD 2.8 and earlier, when the USER_LDT kernel option is enabled, does not validate a call gate target, which allows… Affected: through 2.8 |
| CVE-2000-0313 | – | Mar 12 | Vulnerability in OpenBSD 2.6 allows a local user to change interface media configurations Affected: 2.6 |
| CVE-2000-0312 | – | Mar 12 | cron in OpenBSD 2.5 allows local users to gain root privileges via an argv[] that is not NULL terminated, which is passed to cron's fake popen function Affected: 2.5 |
| CVE-2000-0310 | – | Mar 12 | IP fragment assembly in OpenBSD 2.4 allows a remote attacker to cause a denial of service by sending a large number of fragmented packets Affected: 2.4 |
| CVE-2000-0309 | – | Mar 12 | The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service Affected: 2.4 |
| CVE-2001-0053 | – | Feb 12 | One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges Affected: 2.4; 2.5; 2.6; 2.7; 2.8 |
| CVE-2000-0997 | – | Dec 19 | Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges Affected: 2.3; 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0996 | – | Dec 19 | Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell Affected: All versions, or not specified |
| CVE-2000-0995 | – | Dec 19 | Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name Affected: All versions, or not specified |
| CVE-2000-0994 | – | Dec 19 | Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable Affected: 2.3; 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0993 | – | Dec 19 | Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd Affected: 2.3; 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0962 | – | Dec 19 | The IPSEC implementation in OpenBSD 2.7 does not properly handle empty AH/ESP packets, which allows remote attackers to cause a denial of service Affected: 2.7 |
| CVE-2000-0914 | – | Dec 19 | OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +1 more |
| CVE-2000-1010 | – | Dec 11 | Format string vulnerability in talkd in OpenBSD and possibly other BSD-based OSes allows remote attackers to execute arbitrary commands via a user name that contains format… Affected: 2.3; 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-1004 | – | Dec 11 | Format string vulnerability in OpenBSD photurisd allows local users to execute arbitrary commands via a configuration file directory name that contains formatting characters Affected: 2.3; 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0751 | – | Oct 20 | mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands Affected: 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0750 | – | Oct 20 | Buffer overflow in mopd (Maintenance Operations Protocol loader daemon) allows remote attackers to execute arbitrary commands via a long file name Affected: 2.4; 2.5; 2.6; 2.7 |
| CVE-2000-0092 | – | Jan 19 | The BSD make program allows local users to modify files via a symlink attack when the -j option is being used Affected: 2.6 |
| CVE-1999-0001 | – | Dec 30 | ip_input.c in BSD-derived TCP/IP implementations allows remote attackers to cause a denial of service (crash or hang) via crafted packets Affected: 2.3; 2.4 |
| CVE-2000-0489 | – | Sep 5 | FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size… Affected: 2.5; 2.6; 2.7 |
| CVE-1999-0724 | – | Aug 12 | Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function Affected: 2.5 |
| CVE-1999-0674 | – | Aug 9 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5 |
| CVE-1999-0727 | – | Aug 6 | A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted Affected: 2.5 |
| CVE-1999-0703 | – | Aug 3 | OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices Affected: 2.5 |
| CVE-1999-0481 | – | Mar 22 | Denial of service in "poll" in OpenBSD Affected: 2.4 |
| CVE-1999-0482 | – | Mar 21 | OpenBSD kernel crash through TSS handling, as caused by the crashme program Affected: All versions, or not specified |
| CVE-1999-0483 | – | Feb 25 | OpenBSD crash using nlink value in FFS and EXT2FS filesystems Affected: All versions, or not specified |
| CVE-1999-0484 | – | Feb 23 | Buffer overflow in OpenBSD ping Affected: All versions, or not specified |
| CVE-1999-0485 | – | Feb 19 | Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD Affected: 2.4 |
| CVE-1999-0396 | – | Feb 17 | A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service Affected: 2.4 |
| CVE-1999-0798 | – | Dec 4 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type Affected: 2.3; 2.4 |
| CVE-1999-0062 | – | Aug 3 | The chpass command in OpenBSD allows a local user to gain root access through file descriptor leakage Affected: 2.3 |
| CVE-1999-0303 | – | May 21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames Affected: 2.1; 2.2 |
| CVE-1999-0323 | – | Feb 20 | FreeBSD mmap function allows users to modify append-only or immutable files Affected: 2.2 |
| CVE-1999-0305 | – | Feb 1 | The system configuration control (sysctl) facility in BSD based operating systems OpenBSD 2.2 and earlier, and FreeBSD 2.2.5 and earlier, does not properly restrict source routed… Affected: 2.0; 2.1; 2.2 |
| CVE-1999-0304 | – | Feb 1 | mmap function in BSD allows local attackers in the kmem group to modify memory through devices Affected: 2.2 |