🟡 Medium ⏱ 10–30 min Last verified: 30 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unzip — multiple vulnerabilities Related CVEs: CVE-2005-2475 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141 CVE-2014-9636 CVE-2015-1315 CVE-2015-7696 CVE-2015-7697 Upstream summary: Gustavo Grieco reports: Two issues were found in unzip 6.0: * A heap overflow […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bogofilter — heap corruption by invalid base64 input Related CVEs: CVE-2004-1007 CVE-2005-4591 CVE-2005-4592 CVE-2010-2494 CVE-2012-5468 Upstream summary: David Relson reports: Fix a heap corruption in base64 decoder on invalid input. […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: stunnel — Remote Code Execution Related CVEs: CVE-2011-2940 CVE-2013-1762 Upstream summary: Michal Trojnara reports: 64-bit versions of stunnel with the following conditions: * NTLM authentication enabled * CONNECT protocol negotiation […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — Multiple vulnerabilities Related CVEs: CVE-2015-8605 CVE-2018-5732 CVE-2018-5733 Upstream summary: ISC reports: Failure to properly bounds check a buffer used for processing DHCP options allows a malicious server (or […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 28 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openssl — potential SSL 2.0 rollback Related CVEs: CVE-2005-2969 Upstream summary: Vulnerability: Such applications are affected if they use the option SSL_OP_MSIE_SSLV2_RSA_PADDING. This option is implied by use of SSL_OP_ALL, […]
🟡 Medium ⏱ 10–30 min Last verified: 27 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: linux_base — vulnerabilities in Red Hat 7.1 libraries Related CVEs: CVE-2002-0029 CVE-2004-0083 CVE-2004-0084 CVE-2004-0106 CVE-2004-0687 CVE-2004-0688 CVE-2004-0692 CVE-2004-0914 Upstream summary: Trevor Johnson reported that the Red Hat Linux RPMs used […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zabbix-frontend — multiple XSS vulnerabilities Upstream summary: Martina Matari reports: These URLs (hostgroups.php, usergrps.php) are vulnerable to persistent XSS attacks due to improper sanitation of gname variable when creating user […]
🟢 Low ⏱ 5–15 min Last verified: 27 March 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
