BSD

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: puppet — Unsafe HTTP Redirect Related CVEs: CVE-2018-1000180 CVE-2018-1000613 CVE-2020-7943 CVE-2021-27023 Upstream summary: Puppet reports: A flaw was discovered in Puppet Agent and Puppet Server that may result in a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flac — fix encoder bug Related CVEs: CVE-2007-3507 CVE-2007-4619 CVE-2014-8962 CVE-2014-9028 CVE-2020-0499 CVE-2021-0561 Upstream summary: The FLAC 1.3.4 release reports: Fix 12 decoder bugs found by oss-fuzz. Fix encoder bug […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kafka — Denial Of Service vulnerability Related CVEs: CVE-2020-36518 Upstream summary: NIST reports: jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of […]

🟠 High   ⏱ 15–60 min  Last verified: 11 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ImageMagick7 — multiple vulnerabilities Related CVEs: CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 CVE-2016-8862 CVE-2016-8866 CVE-2016-9298  +12 more Upstream summary: CVE reports: Several vulnerabilities have been discovered in ImageMagick: CVE-2021-20313: A flaw […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: coturn — information leakage Related CVEs: CVE-2020-4067 Upstream summary: Felix Dörre reports: The issue is that STUN/TURN response buffer is not initialized properly. (CWE 665) This is a leak of […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 April 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fail2ban — possible RCE vulnerability in mailing action using mailutils Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek reports: Command mail from mailutils package used in mail actions like mail-whois can […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: aiohttp — open redirect vulnerability Related CVEs: CVE-2021-21330 Upstream summary: Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Anydesk — Multiple Vulnerabilities Related CVEs: CVE-2020-13160 Upstream summary: Anydesk reports: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Several issues in Lynis Upstream summary: lynis update: This release resolves two security issues CVE-2020-13882 – Discovered by Sander Bos, code submission by Katarina Durechova CVE-2019-13033 – Discovered by Sander […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcp — remotely exploitable vulnerability Related CVEs: CVE-2018-5732 CVE-2018-5733 CVE-2021-25217 Upstream summary: Michael McNally reports: Program code used by the ISC DHCP package to read and parse stored leases has […]