BSD

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mnGoSearch buffer overflow in UdmDocToTextBuf() Upstream summary: Jedi/Sector One <[email protected]> reported the following on the full-disclosure list: Every document is stored in multiple parts according to its sections (description, body, […]

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Rust — Race condition enabling symlink following Related CVEs: CVE-2019-12083 CVE-2022-21658 Upstream summary: The Rust Security Response WG was notified that the std::fs::remove_dir_all standard library function is vulnerable to a […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ansible — Ansible user credentials disclosure in ansible-connection module Related CVEs: CVE-2021-3583 CVE-2021-3620 Upstream summary: Red Hat reports: A flaw was found in Ansible Engine's ansible-connection module, where sensitive information […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-ansible — multiple vulnerabilities Related CVEs: CVE-2020-25635 CVE-2020-25636 CVE-2021-3532 Upstream summary: abeluck reports: A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟠 High   ⏱ 15–60 min  Last verified: 22 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: salt — multiple vulnerabilities Related CVEs: CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 CVE-2020-11651 CVE-2020-11652  +12 more Upstream summary: SaltStack reports multiple security vulnerabilities in Salt CVE-2021-3197: The Salt-API.s SSH client […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pjsip — Race condition in SSL socket server Related CVEs: CVE-2021-32686 Upstream summary: pjsip reports: There are a couple of issues found in the SSL socket: A race condition between […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pkg — vulnerability in libfetch Related CVEs: CVE-2013-6393 CVE-2020-7450 Upstream summary: A programming error allows an attacker who can specify a URL with a username and/or password components to overflow […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2022 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-tensorflow — denial of service vulnerability Related CVEs: CVE-2022-35935 CVE-2022-35941 CVE-2022-35991 Upstream summary: Kang Hong Jin, Neophytos Christou, 刘力源 and Pattarakrit Rattankul report: Another instance of CVE-2022-35935, where `SobolSample` is […]