🟡 Medium ⏱ 10–30 min Last verified: 17 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]
🟢 Low ⏱ 5–15 min Last verified: 16 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pear-PEAR — PEAR installer arbitrary code execution vulnerability Upstream summary: Gregory Beaver reports: A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: exim — local privilege escalation Related CVEs: CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2011-0017 Upstream summary: exim.org reports: CVE-2011-0017 – check return value of setuid/setgid. This is a privilege escalation vulnerability whereby the […]
🟡 Medium ⏱ 10–30 min Last verified: 16 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2013-7456 CVE-2016-4343 CVE-2016-5093 CVE-2016-5094 CVE-2016-5096 Upstream summary: The PHP Group reports: Core: Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (CVE-2016-5096) […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: NSS — multiple vulnerabilities Related CVEs: CVE-2009-3555 CVE-2010-0173 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179 +3 more Upstream summary: Mozilla Foundation reports: An out-of-bounds write during Base64 decoding operation in the […]
🟠 High ⏱ 15–60 min Last verified: 15 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mutt/neomutt — multiple vulnerabilities Related CVEs: CVE-2018-14349 CVE-2018-14350 CVE-2018-14351 CVE-2018-14352 CVE-2018-14353 CVE-2018-14354 CVE-2018-14355 CVE-2018-14356 +7 more Upstream summary: NeoMutt report: Description CVE-2018-14349 NO Response Heap Overflow CVE-2018-14350 INTERNALDATE Stack Overflow […]
🟢 Low ⏱ 5–15 min Last verified: 14 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fidogate — write files as `news' user Upstream summary: Neils Heinen reports that the setuid `news' binaries installed as part of fidogate may be used to create files or append […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fsplib — multiple vulnerabilities Related CVEs: CVE-2007-3961 CVE-2007-3962 Upstream summary: A Secunia Advisory reports: fsplib can be exploited to compromise an application using the library. A boundary error exists in […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php — use-after-free vulnerability Upstream summary: Symeon Paraschoudis reports: Use-after-free vulnerability in sqlite3SafetyCheckSickOrOk() Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution […]
🟢 Low ⏱ 5–15 min Last verified: 13 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: postgresql — privilege escalation vulnerability Related CVEs: CVE-2005-0227 Upstream summary: John Heasman and others disovered that non-privileged users could use the LOAD extension to load arbitrary libraries into the postgres […]
