🟢 Low ⏱ 5–15 min Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: SSH.COM SFTP server — format string vulnerability Related CVEs: CVE-2006-0705 Upstream summary: SSH Communications Security Corp reports a format string vulnerability in their SFTP server. This vulnerability could cause a […]
🟢 Low ⏱ 5–15 min Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟠 High ⏱ 15–60 min Last verified: 20 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: wireshark — PCNFSD Dissector Denial of Service Vulnerability Related CVEs: CVE-2004-0176 CVE-2004-0365 CVE-2004-0367 CVE-2004-0504 CVE-2004-0505 CVE-2004-0506 CVE-2004-0507 CVE-2004-0633 +12 more Upstream summary: Secunia reports: A vulnerability has been reported in […]
🟠 High ⏱ 15–60 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnupg — AEAD key import overflow Related CVEs: CVE-2003-0971 CVE-2005-0366 CVE-2006-0049 CVE-2006-0455 CVE-2006-3082 CVE-2006-6235 CVE-2008-1530 CVE-2013-4402 +5 more Upstream summary: Importing an OpenPGP key having a preference list for AEAD […]
🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: phpList — SQL injection and XSS vulnerability Related CVEs: CVE-2009-0422 CVE-2012-2740 CVE-2012-2741 Upstream summary: Zero Science Lab reports: Input passed via the parameter 'sortby' is not properly sanitised before being […]
🟢 Low ⏱ 5–15 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: lizard — Negative size passed to memcpy resulting in memory corruption Related CVEs: CVE-2018-11498 Upstream summary: [email protected] reports: In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product […]
🟡 Medium ⏱ 10–30 min Last verified: 19 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libksba — local denial of service vulnerabilities Related CVEs: CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 Upstream summary: Martin Prpic, Red Hat Product Security Team, reports: Denial of Service due to stack overflow […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Buffer overflow in INN control message handling Upstream summary: A small, fixed-size stack buffer is used to construct a filename based on a received control message. This could result in […]
🟢 Low ⏱ 5–15 min Last verified: 18 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pound remotely exploitable vulnerability Upstream summary: An unknown remotely exploitable vulnerability was disclosed. Robert Segall writes: a security vulnerability was brought to my attention (many thanks to Akira Higuchi). Everyone […]
