NE
Vendor
Netbsd
176
CVEs
0
On KEV
0
New 30D
Products
NE9.8
Netbsd
Netbsd
168 CVEs0 on KEV0 new
FT7.5
Ftpd
Netbsd
2 CVEs0 on KEV0 new
SR5.5
src
NetBSD
2 CVEs0 on KEV0 new
TN7.5
Tnftpd
Netbsd
2 CVEs0 on KEV0 new
NC–
Netbsd Current
Netbsd
1 CVEs0 on KEV0 new
UM–
Umapfs
Netbsd
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-32848 | SR src NetBSD | 4.7 | May 18 | NetBSD cryptodev Race Condition Double-Free via cryptodev_op() |
| CVE-2026-32849 | SR src NetBSD | 5.5 | May 18 | NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c |
| CVE-2024-6387 | NE Netbsd Netbsd | 8.1 | Jul 1 | Openssh: regresshion - race condition in ssh allows rce/dos |
| CVE-2023-45198 | FT Ftpd Netbsd | 7.5 | Oct 5 | ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command |
| CVE-2021-45489 | NE Netbsd Netbsd | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG |
| CVE-2021-45488 | NE Netbsd Netbsd | 7.5 | Dec 25 | In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm |
| CVE-2021-45487 | NE Netbsd Netbsd | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures |
| CVE-2021-45484 | NE Netbsd Netbsd | 7.5 | Dec 25 | In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG |
| CVE-2020-26139 | NE Netbsd Netbsd | 5.3 | May 11 | An issue was discovered in the kernel in NetBSD 7.1 |
| CVE-2012-5365 | NE Netbsd Netbsd | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router… |
| CVE-2012-5363 | NE Netbsd Netbsd | 7.5 | Feb 20 | The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor… |
| CVE-2011-2480 | NE Netbsd Netbsd | 7.5 | Nov 27 | Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures |
| CVE-2017-1000378 | NE Netbsd Netbsd | 9.8 | Jun 19 | The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse… |
| CVE-2017-1000375 | NE Netbsd Netbsd | 9.8 | Jun 19 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary… |
| CVE-2017-1000374 | NE Netbsd Netbsd | 9.8 | Jun 19 | A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries |
| CVE-2016-6253 | NE Netbsd Netbsd | 7.8 | Jan 20 | mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to change ownership of or append data to arbitrary files on the target system via a… |
| CVE-2015-8212 | NE Netbsd Netbsd | 9.8 | Jan 19 | CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled… |
| CVE-2015-5917 | TN Tnftpd Netbsd | – | Oct 9 | The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon… |
| CVE-2014-7250 | NE Netbsd Netbsd | – | Dec 12 | The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers… |
| CVE-2014-8517 | NE Netbsd Netbsd | – | Nov 17 | The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to… |
| CVE-2014-3566 | NE Netbsd Netbsd | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… |
| CVE-2014-5384 | NE Netbsd Netbsd | – | Aug 21 | The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a… |
| CVE-2014-3951 | NE Netbsd Netbsd | – | Aug 21 | The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a… |
| CVE-2014-5015 | NE Netbsd Netbsd | – | Jul 24 | bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when checking .htpasswd restrictions, which allows remote attackers to bypass the HTTP… |
| CVE-2007-6754 | NE Netbsd Netbsd | – | Jul 25 | The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does not properly allocate memory, which makes it easier for context-dependent… |
| CVE-2006-7252 | NE Netbsd Netbsd | – | Jul 25 | Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD makes it easier for context-dependent attackers to perform… |
| CVE-2012-0217 | NE Netbsd Netbsd | – | Jun 12 | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos… |
| CVE-2011-2393 | NE Netbsd Netbsd | – | Feb 2 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and possibly other BSD-based operating systems allows remote attackers to cause a denial… |
| CVE-2011-2895 | NE Netbsd Netbsd | – | Aug 19 | The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in… |
| CVE-2011-0418 | NE Netbsd Netbsd | – | May 24 | The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated… |
| CVE-2011-1920 | NE Netbsd Netbsd | – | May 23 | The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a… |
| CVE-2011-0419 | NE Netbsd Netbsd | – | May 16 | Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18,… |
| CVE-2011-1547 | NE Netbsd Netbsd | – | May 9 | Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1 before 5.1.1, when IPsec is enabled, allow remote attackers to cause a denial of… |
| CVE-2010-4755 | NE Netbsd Netbsd | – | Mar 2 | The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and… |
| CVE-2010-4754 | NE Netbsd Netbsd | – | Mar 2 | The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a… |
| CVE-2010-2530 | NE Netbsd Netbsd | – | Sep 29 | Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0.2 and earlier, FreeBSD, and Apple Mac OS X allow local users to cause a denial of… |
| CVE-2010-3014 | NE Netbsd Netbsd | – | Aug 20 | The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via… |
| CVE-2010-0561 | NE Netbsd Netbsd | – | Feb 8 | Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number… |
| CVE-2009-2793 | NE Netbsd Netbsd | – | Sep 18 | The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre-commit failure of the iret instruction, which might allow local users to gain… |
| CVE-2009-0687 | NE Netbsd Netbsd | – | Aug 11 | The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote… |
| CVE-2009-2483 | NE Netbsd Netbsd | – | Jul 16 | libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized… |
| CVE-2009-2482 | NE Netbsd Netbsd | – | Jul 16 | The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users to change the current root password if it is already known, even when they are… |
| CVE-2009-0689 | NE Netbsd Netbsd | – | Jul 1 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating… |
| CVE-2008-4609 | NE Netbsd Netbsd | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… |
| CVE-2008-2476 | NE Netbsd Netbsd | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… |
| CVE-2008-4247 | NE Netbsd Netbsd | – | Sep 25 | ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote… |
| CVE-2008-3584 | NE Netbsd Netbsd | – | Sep 11 | NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a PPPoE packet tag, which allows remote attackers to cause a denial of service… |
| CVE-2008-2464 | NE Netbsd Netbsd | – | Sep 11 | The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service… |
| CVE-2008-1391 | NE Netbsd Netbsd | – | Mar 27 | Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary… |
| CVE-2008-1335 | NC Netbsd Current Netbsd | – | Mar 13 | The ipsec4_get_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast_ipsec subsystem is enabled, allows remote attackers to bypass… |
| CVE-2008-1215 | NE Netbsd Netbsd | – | Mar 9 | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the… |
| CVE-2007-3654 | NE Netbsd Netbsd | – | Sep 17 | The display driver allocattr functions in NetBSD 3.0 through 4.0_BETA2, and NetBSD-current before 20070728, allow local users to cause a denial of service (panic) via a (1)… |
| CVE-2007-1677 | NE Netbsd Netbsd | – | Mar 30 | Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0_BETA2, and NetBSD-current before 20070329, allow local users to execute… |
| CVE-2007-1523 | NE Netbsd Netbsd | – | Mar 20 | Heap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD, and possibly other BSD derived operating systems allows local users to have an… |
| CVE-2006-6730 | NE Netbsd Netbsd | – | Dec 26 | OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by… |
| CVE-2006-6656 | NE Netbsd Netbsd | – | Dec 20 | Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel… |
| CVE-2006-6653 | NE Netbsd Netbsd | – | Dec 20 | The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket… |
| CVE-2006-6655 | NE Netbsd Netbsd | – | Dec 20 | The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service… |
| CVE-2006-6652 | NE Netbsd Netbsd | – | Dec 20 | Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by… |
| CVE-2006-6654 | NE Netbsd Netbsd | – | Dec 20 | The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers… |