Browse CVEs

MEDIUM 6.8 CVE-2020-7459 In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missi… FreeBSD Mitigation only Fix from $1,6002020-08-06 CRITICAL 9.8 CVE-2020-7454 In FreeBSD 12.1-STABLE before r360971, 12.1-RELEASE before p5, 11.4-STABLE before r360971, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, libalias … FreeBSD Mitigation only Fix from $2,3002020-05-13 MEDIUM 5.5 CVE-2020-7455 In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP p… FreeBSD Mitigation only Fix from $1,6002020-05-13 CRITICAL 9.8 CVE-2019-15880 In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffe… FreeBSD Mitigation only Fix from $2,3002020-05-13 HIGH 7.8 CVE-2019-15878 In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-fre… FreeBSD Mitigation only Fix from $1,9502020-05-13 HIGH 7.4 CVE-2019-15879 In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the crypto… FreeBSD Mitigation only Fix from $1,9502020-05-13 HIGH 7.8 CVE-2012-4576 FreeBSD: Input Validation Flaw allows local users to gain elevated privileges FreeBSD No fix yet Fix from $1,9502019-12-02 HIGH 7.5 CVE-2019-5612 In FreeBSD 12.0-STABLE before r351264, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r351265, 11.3-RELEASE before 11.3-RELEASE-p3, and 11.… FreeBSD No fix yet Fix from $1,9502019-08-30 CRITICAL 9.6 CVE-2019-5604 In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2… FreeBSD No fix yet Fix from $2,3002019-07-26 HIGH 7.8 CVE-2019-5603 In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2… FreeBSD No fix yet Fix from $1,9502019-07-26 HIGH 7.8 CVE-2019-5606 In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2… FreeBSD No fix yet Fix from $1,9502019-07-26 HIGH 7.8 CVE-2019-5607 In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2… FreeBSD No fix yet Fix from $1,9502019-07-26 MEDIUM 6.5 CVE-2019-5605 In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initializat… FreeBSD No fix yet Fix from $1,6002019-07-26 CRITICAL 9.8 CVE-2019-5600 In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-REL… FreeBSD No fix yet Fix from $2,3002019-07-03 HIGH 8.8 CVE-2019-5602 In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and 11.2-REL… FreeBSD No fix yet Fix from $1,9502019-07-03 MEDIUM 6.5 CVE-2019-5601 In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE-p11, a b… FreeBSD No fix yet Fix from $1,6002019-07-03 HIGH 7.5 CVE-2018-6923 In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to excessive s… FreeBSD Mitigation only Fix from $1,9502018-09-04 CRITICAL 9.8 CVE-2016-6559 Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or writ… FreeBSD Mitigation only Fix from $2,3002018-07-13 MEDIUM 5.9 CVE-2016-9042 An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticate… FreeBSD No fix yet Fix from $1,6002018-06-04 CRITICAL 9.8 CVE-2018-7183EPSS 10% Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an … FreeBSD Mitigation only Fix from $2,3002018-03-08 HIGH 7.8 CVE-2015-1416 Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch befo… FreeBSD Mitigation only Fix from $1,9502018-02-05 HIGH 7.8 CVE-2015-1418 The do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 before 10.2-BETA2-p3, 10.2-RC1… FreeBSD Mitigation only Fix from $1,9502018-02-05 MEDIUM 6.5 CVE-2015-5674 The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.… FreeBSD Mitigation only Fix from $1,6002018-02-05 HIGH 7.8 CVE-2017-1087 In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one jail can … FreeBSD Mitigation only Fix from $1,9502017-11-16 HIGH 7.8 CVE-2015-5675 The sys_amd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial of service (kernel panic). FreeBSD No fix yet Fix from $1,9502017-10-10 HIGH 7.5 CVE-2015-1417 The inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before 10.1-RELEASE-p16, 9.x before 9.3-STABLE, 9.3-RELEAS… FreeBSD Mitigation only Fix from $1,9502017-07-25 HIGH 7.8 CVE-2016-1880 The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain … FreeBSD Mitigation only Fix from $1,9502017-02-15 HIGH 7.8 CVE-2016-1881 The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux c… FreeBSD Mitigation only Fix from $1,9502017-02-15 HIGH 7.8 CVE-2016-1883 The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vector… FreeBSD Mitigation only Fix from $1,9502017-02-15 HIGH 7.8 CVE-2016-1889 Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local user… FreeBSD Mitigation only Fix from $1,9502017-02-15