BSD

🟠 High   ⏱ 15–60 min  Last verified: 21 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2014-0472 CVE-2014-0473 CVE-2014-0474 CVE-2014-0480 CVE-2014-0481 CVE-2014-0482 CVE-2014-0483 CVE-2015-0219  +12 more Upstream summary: Django team reports: These release addresses two security issues detailed below. We […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-rsa — Bleichenbacher'06 signature forgery vulnerability Related CVEs: CVE-2016-1494 Upstream summary: Filippo Valsorda reports: python-rsa is vulnerable to a straightforward variant of the Bleichenbacher'06 attack against RSA signature verification with […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: nagios — denial of service vulnerability Related CVEs: CVE-2007-5803 CVE-2008-5027 CVE-2009-2288 CVE-2012-6096 CVE-2013-7108 CVE-2013-7205 Upstream summary: Eric Stanley reports: Most CGIs previously incremented the input variable counter twice when it […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: doas — Prevent passing of environment variables Upstream summary: Jesse Smith (upstream author of the doas program) reported: Previous versions of "doas" transferred most environment variables, such as USER, HOME, […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: evolution — remote format string vulnerabilities Related CVEs: CVE-2005-0102 CVE-2005-2549 CVE-2005-2550 Upstream summary: A SITIC Vulnerability Advisory reports: Evolution suffers from several format string bugs when handling data from remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: clamav — multiple vulnerabilities Related CVEs: CVE-2019-12625 CVE-2019-12900 Upstream summary: Micah Snyder reports: An out of bounds write was possible within ClamAV&s NSIS bzip2 library when attempting decompression in cases […]

🟠 High   ⏱ 15–60 min  Last verified: 20 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: freetype2 — heap buffer overlfow Related CVEs: CVE-2006-0747 CVE-2006-1861 CVE-2006-3467 CVE-2007-2754 CVE-2008-1806 CVE-2008-1807 CVE-2008-1808 CVE-2009-0946  +12 more Upstream summary: The freetype project reports: A heap buffer overflow has been found […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_jk — information disclosure Related CVEs: CVE-2014-8111 Upstream summary: NIST reports: Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 September 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: lbreakout2 vulnerability in environment variable handling Related CVEs: CVE-2004-0158 Upstream summary: Ulf Härnhammar discovered an exploitable vulnerability in lbreakout2's environmental variable handling. In several instances, the contents of the HOME […]