FreeBSD 13

🟠 High   ⏱ 15–60 min  Last verified: 21 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: django — multiple vulnerabilities Related CVEs: CVE-2009-3695 CVE-2010-3082 CVE-2012-3442 CVE-2012-3443 CVE-2012-3444 CVE-2013-0305 CVE-2013-0306 CVE-2013-1443  +6 more Upstream summary: The Django project reports: These releases address an unexpected code-execution issue, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: bogofilter — heap corruption by invalid base64 input Related CVEs: CVE-2010-2494 CVE-2012-5468 Upstream summary: David Relson reports: Fix a heap corruption in base64 decoder on invalid input. Analysis and patch […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: "Content-Type" XSS vulnerability affecting other webmail systems Related CVEs: CVE-2004-0519 Upstream summary: Roman Medina-Heigl Hernandez did a survey which other webmail systems where vulnerable to a bug he discovered in […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: brotli — buffer overflow Related CVEs: CVE-2016-1624 CVE-2016-1968 Upstream summary: Google Chrome Releases reports: [583607] High CVE-2016-1624: Buffer overflow in Brotli. Credit to lukezli. Mozilla Foundation reports: Security researcher Luke […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mpg123 — buffer overflow vulnerability Related CVEs: CVE-2003-0577 CVE-2003-0865 CVE-2004-0805 CVE-2004-0982 CVE-2004-0991 CVE-2004-1284 Upstream summary: Yuri D'Elia has found a buffer overflow vulnerability in mpg123's parsing of frame headers in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libarchive — multiple vulnerabilities Related CVEs: CVE-2006-5680 CVE-2013-0211 CVE-2015-2304 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 Upstream summary: Hanno Bock and Cisco Talos report: Out of bounds heap read in RAR parser […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-cryptography — tag forgery vulnerability Related CVEs: CVE-2016-9243 CVE-2018-10903 Upstream summary: The Python Cryptographic Authority (PyCA) project reports: finalize_with_tag() allowed tag truncation by default which can allow tag forgery in […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Enhanced cTorrent — stack-based overflow Related CVEs: CVE-2009-1759 Upstream summary: Securityfocus reports: cTorrent and dTorrent are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jupyter notebook — open redirect vulnerability Upstream summary: Jupyter reports: 6.1.5 is a security release, fixing one vulnerability: Fix open redirect vulnerability GHSA-c7vm-f5p4-8fqh (CVE to be assigned) Table of contents […]