BSD

🟢 Low   ⏱ 5–15 min  Last verified: 30 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: popfile file disclosure Upstream summary: John Graham-Cumming reports that certain configurations of POPFile may allow the retrieval of any files with the extensions .gif, .png, .ico, .css, as well as […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xchat remotely exploitable buffer overflow (Socks5) Related CVEs: CVE-2004-0409 Upstream summary: A straightforward stack buffer overflow exists in XChat's Socks5 proxy support. The XChat developers report that `tsifra' discovered this […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-kerberos — DoS and MitM vulnerabilities Related CVEs: CVE-2015-3206 Upstream summary: macosforgebot reports: The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PuTTY — Release 0.74 fixes two security vulnerabilities Related CVEs: CVE-2020-14002 Upstream summary: Simon Tatham reports: [Release 0.74] fixes the following security issues: New configuration option to disable PuTTY's default […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bouncycastle15 — bcrypt password checking vulnerability Related CVEs: CVE-2017-13098 CVE-2018-1000180 CVE-2018-1000613 CVE-2020-15522 CVE-2020-28052 Upstream summary: The Bouncy Castle team reports: The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the […]

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2004-0600 CVE-2004-0686 CVE-2004-0815 CVE-2004-1154 CVE-2006-1059 CVE-2006-3403 CVE-2007-0452 CVE-2007-0454  +7 more Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: GNU finger vulnerability Related CVEs: CVE-1999-1165 Upstream summary: GNU security announcement: GNU Finger unfortunately has not been updated in many years, and has known security vulnerabilities. Please do not use […]

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: webkit2-gtk3 — multiple vulnerabilities Related CVEs: CVE-2017-13783 CVE-2017-13784 CVE-2017-13785 CVE-2017-13788 CVE-2017-13791 CVE-2017-13792 CVE-2017-13794 CVE-2017-13795  +12 more Upstream summary: The WebKitGTK project reports vulnerabilities: CVE-2021-30858: Processing maliciously crafted web content may […]

🟠 High   ⏱ 15–60 min  Last verified: 29 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 September 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Istio — Security vulnerabilities Related CVEs: CVE-2019-9900 CVE-2019-9901 Upstream summary: Istio reports: Two security vulnerabilities have recently been identified in the Envoy proxy. The vulnerabilities are centered on the fact […]