FreeBSD 12

🟠 High   ⏱ 15–60 min  Last verified: 10 May 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Intel CPUs — multiple vulnerabilities Related CVEs: CVE-2023-22655 CVE-2023-28746 CVE-2023-38575 CVE-2023-39368 CVE-2023-42667 CVE-2023-43490 CVE-2023-43758 CVE-2023-45733  +12 more Upstream summary: Intel reports: A potential security vulnerability in some Intel Processors may […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 May 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PptiPNG — Global-buffer-overflow Related CVEs: CVE-2008-5101 CVE-2012-4432 CVE-2015-7801 CVE-2015-7802 CVE-2016-2191 CVE-2016-3981 CVE-2016-3982 CVE-2023-43907 Upstream summary: Frank-Z7 reports: Running optipng with the "-zm 3 -zc 1 -zw 256 -snip -out" configuration […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: QtNetworkAuth — predictable seeding of PRNG in QAbstractOAuth Related CVEs: CVE-2024-36048 Upstream summary: Andy Shaw reports: The OAuth1 implementation in QtNetworkAuth created nonces using a PRNG that was seeded with […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SoftEtherVPN — multiple vulnerabilities Related CVEs: CVE-2023-22325 CVE-2023-27395 CVE-2023-27516 CVE-2023-31192 CVE-2023-32275 CVE-2023-32634 Upstream summary: Daiyuu Nobori reports: The SoftEther VPN project received a high level code review and technical assistance […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: R — arbitrary code execution vulnerability Related CVEs: CVE-2024-27322 Upstream summary: HiddenLayer Research reports: Deserialization of untrusted data can occur in the R statistical programming language, enabling a maliciously crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — PL/Perl environment variable changes execute arbitrary code Related CVEs: CVE-2024-10979 Upstream summary: PostgreSQL project reports: Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: moonlight-embedded — multiple vulnerabilities Related CVEs: CVE-2022-42799 CVE-2022-42800 CVE-2022-42801 Upstream summary: The moonlight-embedded project reports: Moonlight Embedded v2.6.1 fixed CVE-2023-42799, CVE-2023-42800, and CVE-2023-42801. Table of contents Symptom & Impact Environment […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: hcode — buffer overflow in mail.c Related CVEs: CVE-2024-34020 Upstream summary: The openSUSE project reports: The problematic function in question is putSDN() in mail.c. The static variable `cp` is used […]