BSD

🟢 Low   ⏱ 5–15 min  Last verified: 7 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-foolscap — local file inclusion Upstream summary: Brian Warner reports: The "flappserver" feature was found to have a vulnerability in the service-lookup code which, when combined with an attacker who […]

🟠 High   ⏱ 15–60 min  Last verified: 7 November 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jasper — multiple vulnerabilities Related CVEs: CVE-2008-3520 CVE-2008-3522 CVE-2011-4516 CVE-2011-4517 CVE-2014-8137 CVE-2014-8138 CVE-2014-8157 CVE-2014-8158  +12 more Upstream summary: JasPer Releases: – Fix memory-related bugs in the JPEG-2000 codec resulting from […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: proftpd — arbitrary code execution vulnerability with chroot Related CVEs: CVE-2008-4242 CVE-2008-4247 CVE-2009-0542 CVE-2009-0543 Upstream summary: The FreeBSD security advisory FreeBSD-SA-11:07.chroot reports: If ftpd is configured to place a user […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdepimlibs — directory traversal on KTNEF Upstream summary: Albert Aastals Cid reports: A directory traversal issue was found in KTNEF which can be exploited by tricking a user into opening […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Ruby Activemodel Gem — Circumvention of attr_protected Related CVEs: CVE-2013-0276 Upstream summary: Aaron Patterson reports: The attr_protected method allows developers to specify a blacklist of model attributes which users should […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: inn — plaintext command injection into encrypted channel Related CVEs: CVE-2011-0411 CVE-2012-3523 Upstream summary: INN developers report: Fixed a possible plaintext command injection during the negotiation of a TLS layer. […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU Anubis buffer overflows and format string vulnerabilities Related CVEs: CVE-2004-0353 CVE-2004-0354 Upstream summary: Ulf Härnhammar discovered several vulnerabilities in GNU Anubis. Unsafe uses of `sscanf'. The `%s' format specifier […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 November 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kde-runtime — kdesu: displayed command truncated by unicode string terminator Related CVEs: CVE-2013-7252 CVE-2014-8600 CVE-2016-7787 Upstream summary: Albert Aastals Cid reports: A maliciously crafted command line for kdesu can result […]