BSD

🟡 Medium   ⏱ 10–30 min  Last verified: 3 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: exim — local privilege escalation Related CVEs: CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2011-0017 Upstream summary: exim.org reports: CVE-2011-0017 – check return value of setuid/setgid. This is a privilege escalation vulnerability whereby the […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: FreeBSD — Incorrect libcap_net limitation list manipulation Related CVEs: CAN-2005-2693 CAN-2005-3011 CVE-2003-0914 CVE-2003-0989 CVE-2003-1029 CVE-2004-0057 CVE-2004-0079 CVE-2004-0099  +12 more Upstream summary: Problem Description: In the case of the cap_net service, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick and GraphicsMagick — DoS via specially crafted PNG file Related CVEs: CVE-2012-3438 Upstream summary: Kurt Seifried reports: There is an issue in ImageMagick that is also present in GraphicsMagick. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ceph14 — HTTP header injection via CORS ExposeHeader tag Related CVEs: CVE-2020-10753 CVE-2020-1759 CVE-2020-1760 Upstream summary: Red Hat bugzilla reports: A flaw was found in the Red Hat Ceph Storage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp — remotely exploitable vulnerability Related CVEs: CVE-2018-5732 CVE-2018-5733 CVE-2021-25217 Upstream summary: Michael McNally reports: Program code used by the ISC DHCP package to read and parse stored leases has […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tin — buffer overflow vulnerabilities Upstream summary: Urs Janssen and Aleksey Salow report possible buffer overflows in tin versions 1.8.0 and 1.8.1. OpenPKG project elaborates there is an allocation off-by-one […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — denial of service via crafted mail message Related CVEs: CVE-2004-0078 CVE-2007-2683 CVE-2014-9116 Upstream summary: NVD reports: The write_one_header function in mutt 1.5.23 does not properly handle newline characters […]