BSD

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py39-unicorn — sandbox escape and arbitrary code execution vulnerability Related CVEs: CVE-2021-44078 Upstream summary: jwang-a reports: An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SOGo — SAML user authentication impersonation Related CVEs: CVE-2021-33054 Upstream summary: sogo.nu reports: SOGo was not validating the signatures of any SAML assertions it received. This means any actor with […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsamplerate — multiple vulnerabilities Related CVEs: CVE-2017-7697 Upstream summary: NVD reports: In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted audio file. […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-Horde_Image — DoS vulnerability Related CVEs: CVE-2017-9773 CVE-2017-9774 Upstream summary: Michael J Rubinsky reports: The second vulnerability (CVE-2017-9773) is a DOS vulnerability. This only affects Horde installations that do not […]

🟠 High   ⏱ 15–60 min  Last verified: 22 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libsndfile — out-of-bounds reads Related CVEs: CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2017-6892 CVE-2017-7585  +7 more Upstream summary: Xin-Jiang on Github reports: CVE-2017-14245 (Medium): An out of bounds read in […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 September 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lldpd — Buffer overflow/Denial of service Related CVEs: CVE-2015-8011 CVE-2015-8012 Upstream summary: The lldpd developer Vincent Bernat reports: A buffer overflow may allow arbitrary code execution only if hardening was […]

🟠 High   ⏱ 15–60 min  Last verified: 21 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libwmf — multiple vulnerabilities Related CVEs: CVE-2004-0941 CVE-2006-3376 CVE-2007-0455 CVE-2007-2756 CVE-2007-3472 CVE-2007-3473 CVE-2007-3477 CVE-2009-1364  +5 more Upstream summary: Mitre reports: Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nbd-server — buffer overflow vulnerability Related CVEs: CVE-2005-3534 Upstream summary: Kurt Fitzner reports a buffer overflow vulnerability within nbd. This could potentially allow the execution of arbitrary code on the […]

🟠 High   ⏱ 15–60 min  Last verified: 21 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: X.org libraries — multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988  +12 more Upstream summary: Matthieu Herrb reports: Tobias Stoeckmann from the OpenBSD project has discovered […]