🟢 Low ⏱ 5–15 min Last verified: 6 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: eog — out-of-bounds write Related CVEs: CVE-2016-6855 Upstream summary: Felix Riemann reports: CVE-2016-6855 out-of-bounds write in eog 3.10.2. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-Mail-SpamAssassin — local user symlink-attack DoS vulnerability Related CVEs: CVE-2004-0796 CVE-2005-1266 CVE-2007-2873 Upstream summary: SpamAssassin website reports: A local user symlink-attack DoS vulnerability in SpamAssassin has been found, affecting versions […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: trac — potential DOS vulnerability Related CVEs: CVE-2005-3980 CVE-2005-4065 CVE-2005-4305 Upstream summary: Trac development team reports: 0.11.2 is a new stable maintenance release. It contains several security fixes and everyone […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libxml2 — Enforce the reader to run in constant memory Related CVEs: CVE-2013-2877 CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 Upstream summary: Daniel Veilland reports: Enforce the reader to run in constant memory. One […]
🟡 Medium ⏱ 10–30 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Pillow — multiple vulnerabilities Related CVEs: CVE-2016-0740 CVE-2016-0775 CVE-2016-9189 CVE-2016-9190 Upstream summary: Pillow reports: Pillow prior to 3.3.2 may experience integer overflow errors in map.c when reading specially crafted image […]
🟢 Low ⏱ 5–15 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-imap — Denial of Service Related CVEs: CVE-2010-4150 Upstream summary: The following DoS condition in IMAP extension was fixed in PHP 5.3.4 and PHP 5.2.15: A remote user can send […]
🟢 Low ⏱ 5–15 min Last verified: 5 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mkbold-mkitalic — format string vulnerability Upstream summary: The version 0.06_1 and prior have a format string vulnerability which can be triggered by using a carefully-crafted BDF font file. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libmspack — frame_end overflow which could cause infinite loop Related CVEs: CVE-2014-9556 Upstream summary: There is a denial of service vulnerability in libmspack. The libmspack code is built into cabextract, […]
🟡 Medium ⏱ 10–30 min Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tiff — multiple vulnerabilities Related CVEs: CVE-2015-8870 CVE-2016-5652 CVE-2016-9533 CVE-2016-9534 CVE-2016-9535 CVE-2016-9536 CVE-2016-9537 CVE-2016-9540 Upstream summary: libtiff project reports: Multiple flaws have been discovered in libtiff library and utilities. Table […]
🟢 Low ⏱ 5–15 min Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libzip — denial of service Related CVEs: CVE-2015-2331 CVE-2017-14107 Upstream summary: libzip developers report: The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers […]
