Browse CVEs

HIGH 7.1 CVE-2023-5369 Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input and output file descriptors,… FreeBSD Mitigation only Fix from $1,9502023-10-04 MEDIUM 6.5 CVE-2023-5368 On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional space in the file with unall… FreeBSD 12.4 / 13.2+ Fix from $1,6002023-10-04 HIGH 7.5 CVE-2023-4809 In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then im… FreeBSD 12.4 / 13.2+ Fix from $1,9502023-09-06 HIGH 8.8 CVE-2023-3494 The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a… FreeBSD Mitigation only Fix from $1,9502023-08-01 HIGH 7.5 CVE-2023-3107 A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's payload length field. T… FreeBSD Mitigation only Fix from $1,9502023-08-01 CRITICAL 9.8 CVE-2023-3326 pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the Kerberos KDC (Key Distr… FreeBSD 12.4 / 13.1+ Fix from $2,3002023-06-22 MEDIUM 6.5 CVE-2023-0751 When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and s… FreeBSD Patch available Fix from $1,6002023-02-08 HIGH 7.5 CVE-2022-32264 sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerability due to improper handling of TSopt on TCP connections. … FreeBSD 7.0+ Fix from $1,9502022-09-06 HIGH 7.5 CVE-2021-29632 In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditio… FreeBSD Mitigation only Fix from $1,9502022-01-18 HIGH 8.1 CVE-2021-29630 In FreeBSD 13.0-STABLE before n246938-0729ba2f49c9, 12.2-STABLE before r370383, 11.4-STABLE before r370381, 13.0-RELEASE before p4, 12.2-RELEASE befo… FreeBSD Patch available Fix from $1,9502021-08-30 HIGH 7.8 CVE-2021-29631 In FreeBSD 13.0-STABLE before n246941-20f96f215562, 12.2-STABLE before r370400, 11.4-STABLE before r370399, 13.0-RELEASE before p4, 12.2-RELEASE befo… FreeBSD Mitigation only Fix from $1,9502021-08-30 CRITICAL 9.1 CVE-2021-36159 libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passiv… Libfetch 2021-07-26+ Fix from $2,3002021-08-03 HIGH 7.5 CVE-2020-7469 In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the han… FreeBSD Mitigation only Fix from $1,9502021-06-04 HIGH 7.5 CVE-2021-29628 In FreeBSD 13.0-STABLE before n245764-876ffe28796c, 12.2-STABLE before r369857, 13.0-RELEASE before p1, and 12.2-RELEASE before p7, a system call tri… FreeBSD No fix yet Fix from $1,9502021-05-28 HIGH 7.5 CVE-2021-29629 In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE befo… FreeBSD Mitigation only Fix from $1,9502021-05-28 HIGH 7.8 CVE-2021-29627 In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters im… FreeBSD 12.2+ Fix from $1,9502021-04-07 HIGH 7.5 CVE-2020-25584 In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-R… FreeBSD 11.4 / 12.2+ Fix from $1,9502021-04-07 MEDIUM 5.5 CVE-2021-29626 In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-R… FreeBSD 11.4 / 12.2+ Fix from $1,6002021-04-07 CRITICAL 9.8 CVE-2020-25577 In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(… FreeBSD Mitigation only Fix from $2,3002021-03-29 CRITICAL 9.8 CVE-2020-25583 In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when pr… FreeBSD Mitigation only Fix from $2,3002021-03-29 HIGH 8.8 CVE-2020-7468 In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd… FreeBSD Mitigation only Fix from $1,9502021-03-26 HIGH 7.6 CVE-2020-7467 In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a numb… FreeBSD Mitigation only Fix from $1,9502021-03-26 HIGH 7.3 CVE-2020-7461 In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhcli… FreeBSD Mitigation only Fix from $1,9502021-03-26 MEDIUM 5.5 CVE-2020-7462 In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-b… FreeBSD Mitigation only Fix from $1,6002021-03-26 MEDIUM 5.5 CVE-2020-7463 In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, impro… FreeBSD 11.3 / 12.3+ Fix from $1,6002021-03-26 MEDIUM 5.3 CVE-2020-7464 In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a pr… FreeBSD Mitigation only Fix from $1,6002021-03-26 HIGH 8.7 CVE-2020-25582 In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8)… FreeBSD Mitigation only Fix from $1,9502021-03-26 HIGH 7.5 CVE-2020-25581 In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the j… FreeBSD Mitigation only Fix from $1,9502021-03-26 MEDIUM 5.3 CVE-2020-25578 In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several… FreeBSD Mitigation only Fix from $1,6002021-03-26 MEDIUM 5.3 CVE-2020-25579 In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs… FreeBSD Mitigation only Fix from $1,6002021-03-26