🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpList — SQL injection and XSS vulnerability Related CVEs: CVE-2009-0422 CVE-2012-2740 CVE-2012-2741 Upstream summary: Zero Science Lab reports: Input passed via the parameter 'sortby' is not properly sanitised before being […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lizard — Negative size passed to memcpy resulting in memory corruption Related CVEs: CVE-2018-11498 Upstream summary: [email protected] reports: In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product […]
🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libksba — local denial of service vulnerabilities Related CVEs: CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 Upstream summary: Martin Prpic, Red Hat Product Security Team, reports: Denial of Service due to stack overflow […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Buffer overflow in INN control message handling Upstream summary: A small, fixed-size stack buffer is used to construct a filename based on a received control message. This could result in […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pound remotely exploitable vulnerability Upstream summary: An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes: a security vulnerability was brought to my attention (many thanks to Akira Higuchi). Everyone […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ripMIME — decoding bug allowing content filter bypass Upstream summary: ripMIME may prematurely terminate decoding Base64 encoded messages when it encounters multiple blank lines or other non-standard Base64 constructs. Virus […]
🟠 High ⏱ 15–60 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lighttpd – use-after-free vulnerabilities Related CVEs: CVE-2005-0453 CVE-2007-1869 CVE-2007-1870 CVE-2007-3947 CVE-2007-3948 CVE-2007-3949 CVE-2007-3950 CVE-2007-4727 +11 more Upstream summary: Lighttpd Project reports: Security fixes for Lighttpd: security: process headers after combining […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bitlbee — account recreation security issues Related CVEs: CVE-2008-3920 CVE-2008-3969 Upstream summary: Secunia reports: Some security issues have been reported in BitlBee, which can be exploited by malicious people to […]
🟢 Low ⏱ 5–15 min Last verified: 17 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: dcraw — integer overflow condition Related CVEs: CVE-2015-3885 Upstream summary: ocert reports: The dcraw tool, as well as several other projects re-using its code, suffers from an integer overflow condition […]
