FreeBSD 12

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Apache OpenOffice — master password vulnerabilities Related CVEs: CVE-2014-3575 CVE-2015-1774 CVE-2015-4551 CVE-2015-5212 CVE-2015-5213 CVE-2015-5214 CVE-2016-1513 CVE-2017-12607  +11 more Upstream summary: The Apache Openoffice project reports: Apache OpenOffice supports the storage […]

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: LibreSSL — overwrite and -read vulnerability Related CVEs: CVE-2014-8176 CVE-2015-0204 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289  +12 more Upstream summary: The LibreSSL project reports: An incorrect length check can result […]

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: rubygem-resolv — Possible denial of service Related CVEs: CVE-2004-0755 CVE-2004-0983 CVE-2005-1992 CVE-2005-2337 CVE-2006-3694 CVE-2006-5467 CVE-2006-6303 CVE-2008-1447  +12 more Upstream summary: Manu reports: The vulnerability is caused by an insufficient check […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xscreensaver – lock bypass Related CVEs: CVE-2015-8025 Upstream summary: RedHat bugzilla reports: In dual screen configurations, unplugging one screen will cause xscreensaver to crash, leaving the screen unlocked. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: habari — Cross-Site Scripting Vulnerability Related CVEs: CVE-2008-4601 Upstream summary: Secunia reports: Input passed via the "habari_username" parameter when logging in is not properly sanitised before being returned to the […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: shtool — insecure temporary file creation Upstream summary: A Zataz advisory reports that shtool contains a security flaw which could allow a malicious local user to create or overwrite the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: neon — NULL pointer dereference in Digest domain support Related CVEs: CVE-2004-0179 CVE-2004-0398 CVE-2008-3746 Upstream summary: Joe Orton reports: A NULL pointer deference in the Digest authentication support in neon […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php5 — multiple vulnerabilities Related CVEs: CVE-2015-4643 CVE-2015-4644 Upstream summary: The PHP project reports: DOM and GD: Fixed bug #69719 (Incorrect handling of paths with NULs). FTP: Improved fix for […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 April 2020 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpm — image decoding vulnerabilities Related CVEs: CVE-2004-0687 CVE-2004-0688 Upstream summary: Chris Evans discovered several vulnerabilities in the libXpm image decoder: A stack-based buffer overflow in xpmParseColors An integer overflow […]