BSD

🟢 Low   ⏱ 5–15 min  Last verified: 20 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-flask-caching — remote code execution or local privilege escalation vulnerabilities Related CVEs: CVE-2021-33026 Upstream summary: subnix reports: The Flask-Caching extension through 2.0.2 for Flask relies on Pickle for serialization, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pkg — vulnerability in libfetch Related CVEs: CVE-2013-6393 CVE-2020-7450 Upstream summary: A programming error allows an attacker who can specify a URL with a username and/or password components to overflow […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nested filters leads to stack overflow Related CVEs: CVE-2020-12243 Upstream summary: Howard Chu reports: nested filters leads to stack overflow Table of contents Symptom & Impact Environment & Reproduction Root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: halibut — Segmentation fault, denial of service or possibly other unspecified impact via a crafted text document Related CVEs: CVE-2021-42612 CVE-2021-42613 CVE-2021-42614 Upstream summary: [email protected] reports: CVE-2021-42612: A use after […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: chocolate-doom — Arbitrary code execution Related CVEs: CVE-2020-14983 Upstream summary: Michal Dardas from LogicalTrust reports: The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sympa — Inappropriate use of the cookie parameter can be a security threat. This parameter may also not provide sufficient security. Related CVEs: CVE-2005-0073 CVE-2012-2352 CVE-2015-1306 CVE-2020-29668 CVE-2020-9369 Upstream summary: […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Icinga Web 2 — directory traversal vulnerability Related CVEs: CVE-2020-24368 Upstream summary: Icinga development team reports: CVE-2020-24368 Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2021 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: x11vnc — access to shared memory segments Related CVEs: CVE-2006-2450 CVE-2020-29074 Upstream summary: [email protected] reports: scan.c in x11vnc 0.9.16 uses IPC_CREAT|0777 in shmget calls, which allows access by actors other […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mozjpeg — heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file Related CVEs: CVE-2020-13790 Upstream summary: NIST reports: Heap-based buffer over-read in get_rgb_row() in rdppm.c via […]