FreeBSD 13

🟠 High   ⏱ 15–60 min  Last verified: 8 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2015-3395 CVE-2015-3417 CVE-2015-6818 CVE-2015-6819 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6823  +3 more Upstream summary: NVD reports: The decode_ihdr_chunk function in libavcodec/pngdec.c in FFmpeg before 2.7.2 does […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: openoffice — DOC document heap overflow vulnerability Related CVEs: CVE-2004-0752 CVE-2005-0941 Upstream summary: AD-LAB reports that a heap-based buffer overflow vulnerability exists in OpenOffice's handling of DOC documents. When reading […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cups-lpr — lppasswd multiple vulnerabilities Related CVEs: CVE-2004-1268 CVE-2004-1269 CVE-2004-1270 Upstream summary: D. J. Bernstein reports that Bartlomiej Sieka has discovered several security vulnerabilities in lppasswd, which is part of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: memcached — multiple vulnerabilities Related CVEs: CVE-2009-1255 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 Upstream summary: Cisco Talos reports: Multiple integer overflow vulnerabilities exist within Memcached that could be exploited to achieve remote code […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: isakmpd payload handling denial-of-service vulnerabilities Related CVEs: CVE-2004-0218 CVE-2004-0219 CVE-2004-0220 CVE-2004-0221 CVE-2004-0222 Upstream summary: Numerous errors in isakmpd's input packet validation lead to denial-of-service vulnerabilities. From the Rapid7 advisory: The […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libtomcrypt — weak signature scheme with ECC keys Upstream summary: The Secure Science Corporation reports that libtomcrypt is vulnerable to a weak signature scheme. This allows an attacker to create […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-numpy — Missing return-value validation of the function PyArray_DescrNew Related CVEs: CVE-2021-41495 Upstream summary: Numpy reports: At most call-sites for PyArray_DescrNew, there are no validations of its return, but an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: squid — Vulnerable to Denial of Service attack Related CVEs: CVE-2016-10002 CVE-2016-10003 CVE-2016-4553 CVE-2016-4554 CVE-2016-4555 CVE-2016-4556 CVE-2018-1000024 CVE-2018-1000027 Upstream summary: Louis Dion-Marcil reports: Due to incorrect pointer handling Squid is […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2021 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: irc/bitchx — multiple vulnerabilities Related CVEs: CVE-2007-4584 CVE-2007-5839 CVE-2007-5922 Upstream summary: bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a […]