🟢 Low ⏱ 5–15 min Last verified: 11 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mod_fcgid — possible heap buffer overwrite Related CVEs: CVE-2013-4365 Upstream summary: Apache Project reports: Fix possible heap buffer overwrite. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]
🟢 Low ⏱ 5–15 min Last verified: 11 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xv — filename handling format string vulnerability Related CVEs: CVE-2005-0665 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw […]
🟠 High ⏱ 15–60 min Last verified: 11 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: (lib)tiff — Integer Overflow or Wraparound Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1183 CVE-2004-1308 CVE-2005-1544 CVE-2009-2347 CVE-2010-1411 +12 more Upstream summary: PrymEvol and Quang Luong reports: A flaw was found in […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tidy — heap-buffer-overflow Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Geoff McLane reports: tidy is affected by a write out of bounds when processing malformed html files. This issue could be […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: froxlor — database password information leak Related CVEs: CVE-2015-5959 Upstream summary: [email protected] reports: An unauthenticated remote attacker is able to get the database password via webaccess due to wrong file […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ghostscript — denial of service (crash) via crafted Postscript files Related CVEs: CVE-2015-3228 Upstream summary: MITRE reports: Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-HTML-Scrubber — XSS vulnerability Related CVEs: CVE-2015-5667 Upstream summary: MITRE reports: Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nagios-plugins — Long Location Header Buffer Overflow Vulnerability Related CVEs: CVE-2007-5198 Upstream summary: A Secunia Advisory reports: The vulnerability is caused due to a boundary error within the redir() function […]
Introduction This guide explains how to Use zrepl for ZFS Replication on FreeBSD 12 on FreeBSD 12. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]
🟢 Low ⏱ 5–15 min Last verified: 10 December 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ruby — CGI DoS Related CVEs: CVE-2004-0983 Upstream summary: The Ruby CGI.rb module contains a bug which can cause the CGI module to go into an infinite loop, thereby causing […]
