BSD

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-imaging, py-pillow — Buffer overflow in PCD decoder Related CVEs: CVE-2016-0775 Upstream summary: The Pillow maintainers report: In all versions of Pillow, dating back at least to the last PIL […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: qt4-imageformats, qt4-gui, qt5-gui — Multiple Vulnerabilities in Qt Image Format Handling Related CVEs: CVE-2014-0190 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Richard J. Moore reports: Due to two recent vulnerabilities identified in […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Upstream summary: The PHP Group reports: Fileinfo: Fixed bug #71527 (Buffer over-write in finfo_open with malformed magic file). mbstring: Fixed bug #71906 (AddressSanitizer: negative-size-param (-1) in […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟠 High   ⏱ 15–60 min  Last verified: 14 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozilla — code execution via Quicktime media-link files Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 CVE-2004-0717 CVE-2004-0718 CVE-2004-0721 CVE-2004-0722 CVE-2004-0757  +12 more Upstream summary: The Mozilla Foundation reports a vulnerability within the […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: age — age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution Upstream summary: Filippo Valsorda reports: A plugin name containing a path separator may allow an […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dbus-glib — privledge escalation Related CVEs: CVE-2013-0292 Upstream summary: Sebastian Krahmer reports: A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 August 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]