🟡 Medium ⏱ 10–30 min Last verified: 26 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gdk-pixbuf — image decoding vulnerabilities Related CVEs: CVE-2004-0782 CVE-2004-0783 CVE-2004-0788 Upstream summary: Chris Evans discovered several flaws in the gdk-pixbuf XPM image decoder: Heap-based overflow in pixbuf_create_from_xpm Stack-based overflow in […]
🟡 Medium ⏱ 10–30 min Last verified: 26 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rubygem-geminabox — XSS vulnerabilities Related CVEs: CVE-2017-14506 CVE-2017-14683 CVE-2017-16792 Upstream summary: NVD reports: Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject […]
Introduction How to Configure ZFS Encryption on FreeBSD 13 is a core administration task for any FreeBSD 13 server operator. FreeBSD 13 ships with the 15.0-RELEASE kernel, ZFS as the default root filesystem, Capsicum capability sandboxing improvements, and an updated ports tree. Unlike Linux distributions, FreeBSD uses rc(8) for service management, pf for packet filtering, […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — format string vulnerabilities Related CVEs: CVE-2004-1006 Upstream summary: The ISC DHCP programs are vulnerable to several format string vulnerabilities which may allow a remote attacker to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 25 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ecartis — unauthorised access to admin interface Related CVEs: CVE-2003-0781 CVE-2003-0782 CVE-2004-0913 Upstream summary: A Debian security advisory reports: A problem has been discovered in ecartis, a mailing-list manager, which […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pysaml2 — multiple vulnerabilities Related CVEs: CVE-2021-21238 CVE-2021-21239 Upstream summary: pysaml2 Releases: Fix processing of invalid SAML XML documents – CVE-2021-21238 Fix unspecified xmlsec1 key-type preference – CVE-2021-21239 Table of […]
🟢 Low ⏱ 5–15 min Last verified: 24 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: openldap — slapd acl selfwrite Security Issue Related CVEs: CVE-2006-4600 Upstream summary: Howard Chu reports: An ACL of the form 'access to dn.subtree="ou=groups, dc=example,dc=com" attr=member by * selfwrite' is intended […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: password-store — GPG parsing vulnerabilities Related CVEs: CVE-2018-12356 Upstream summary: Jason A. Donenfeld reports: Markus Brinkmann discovered that [the] parsing of gpg command line output with regexes isn't anchored to […]
🟢 Low ⏱ 5–15 min Last verified: 23 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rar — password prompt buffer overflow vulnerability Related CVEs: CVE-2007-0855 Upstream summary: iDefense reports: Remote exploitation of a stack based buffer overflow vulnerability in RARLabs Unrar may allow an attacker […]
