Vulnerability index

Browse CVEs

387 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

FreeBSD HIGH 7.1
CVE-2023-5369

Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input and output file descriptors,…

Mitigation only
Fix from $1,950 2023-10-04
FreeBSD MEDIUM 6.5
CVE-2023-5368

On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional space in the file with unall…

Fix: 12.4 / 13.2+
Fix from $1,600 2023-10-04
FreeBSD HIGH 7.5
CVE-2023-4809

In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then im…

Fix: 12.4 / 13.2+
Fix from $1,950 2023-09-06
FreeBSD HIGH 8.8
CVE-2023-3494

The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a…

Mitigation only
Fix from $1,950 2023-08-01
FreeBSD HIGH 7.5
CVE-2023-3107

A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. T…

Mitigation only
Fix from $1,950 2023-08-01
FreeBSD CRITICAL 9.8
CVE-2023-3326

pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distr…

Fix: 12.4 / 13.1+
Fix from $2,300 2023-06-22
FreeBSD MEDIUM 6.5
CVE-2023-0751

When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and s…

Patch available
Fix from $1,600 2023-02-08
FreeBSD HIGH 7.5
CVE-2022-32264

sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connections. …

Fix: 7.0+
Fix from $1,950 2022-09-06
FreeBSD HIGH 7.5
CVE-2021-29632

In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditio…

Mitigation only
Fix from $1,950 2022-01-18
FreeBSD HIGH 8.1
CVE-2021-29630

In FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before r370383, 11.4-STABLE before r370381, 13.0-RELEASE before p4, 12.2-RELEASE befo…

Patch available
Fix from $1,950 2021-08-30
FreeBSD HIGH 7.8
CVE-2021-29631

In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE befo…

Mitigation only
Fix from $1,950 2021-08-30
Libfetch CRITICAL 9.1
CVE-2021-36159

libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passiv…

Fix: 2021-07-26+
Fix from $2,300 2021-08-03
FreeBSD HIGH 7.5
CVE-2020-7469

In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the han…

Mitigation only
Fix from $1,950 2021-06-04
FreeBSD HIGH 7.5
CVE-2021-29628

In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call tri…

No fix yet
Fix from $1,950 2021-05-28
FreeBSD HIGH 7.5
CVE-2021-29629

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE befo…

Mitigation only
Fix from $1,950 2021-05-28
FreeBSD HIGH 7.8
CVE-2021-29627

In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters im…

Fix: 12.2+
Fix from $1,950 2021-04-07
FreeBSD HIGH 7.5
CVE-2020-25584

In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-R…

Fix: 11.4 / 12.2+
Fix from $1,950 2021-04-07
FreeBSD MEDIUM 5.5
CVE-2021-29626

In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-R…

Fix: 11.4 / 12.2+
Fix from $1,600 2021-04-07
FreeBSD CRITICAL 9.8
CVE-2020-25577

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(…

Mitigation only
Fix from $2,300 2021-03-29
FreeBSD CRITICAL 9.8
CVE-2020-25583

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when pr…

Mitigation only
Fix from $2,300 2021-03-29
FreeBSD HIGH 8.8
CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd…

Mitigation only
Fix from $1,950 2021-03-26
FreeBSD HIGH 7.6
CVE-2020-7467

In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a numb…

Mitigation only
Fix from $1,950 2021-03-26
FreeBSD HIGH 7.3
CVE-2020-7461

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhcli…

Mitigation only
Fix from $1,950 2021-03-26
FreeBSD MEDIUM 5.5
CVE-2020-7462

In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-b…

Mitigation only
Fix from $1,600 2021-03-26
FreeBSD MEDIUM 5.5
CVE-2020-7463

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, impro…

Fix: 11.3 / 12.3+
Fix from $1,600 2021-03-26
FreeBSD MEDIUM 5.3
CVE-2020-7464

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a pr…

Mitigation only
Fix from $1,600 2021-03-26
FreeBSD HIGH 8.7
CVE-2020-25582

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8)…

Mitigation only
Fix from $1,950 2021-03-26
FreeBSD HIGH 7.5
CVE-2020-25581

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the j…

Mitigation only
Fix from $1,950 2021-03-26
FreeBSD MEDIUM 5.3
CVE-2020-25578

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several…

Mitigation only
Fix from $1,600 2021-03-26
FreeBSD MEDIUM 5.3
CVE-2020-25579

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs…

Mitigation only
Fix from $1,600 2021-03-26