FreeBSD 13

🟡 Medium   ⏱ 10–30 min  Last verified: 12 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: RubyGems — multiple vulnerabilities Related CVEs: CVE-2017-0903 CVE-2019-8320 CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 Upstream summary: RubyGems Security Advisories: CVE-2019-8320: Delete directory using symlink when decompressing tar CVE-2019-8321: Escape sequence injection […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: SQLite — Corrupt DB can cause a NULL pointer dereference Related CVEs: CVE-2018-8740 Upstream summary: MITRE reports: SQLite databases whose schema is corrupted using a CREATE TABLE AS statement could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: flac — fix encoder bug Related CVEs: CVE-2007-3507 CVE-2007-4619 CVE-2014-8962 CVE-2014-9028 CVE-2020-0499 CVE-2021-0561 Upstream summary: The FLAC 1.3.4 release reports: Fix 12 decoder bugs found by oss-fuzz. Fix encoder bug […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mailman < 2.1.38 — CSRF vulnerability of list mod or member against list admin page Related CVEs: CVE-2021-43331 CVE-2021-43332 CVE-2021-44227 Upstream summary: Mark Sapiro reports: A list moderator or list […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: drm graphics drivers — potential information disclusure via local access Related CVEs: CVE-2019-0154 CVE-2019-11112 CVE-2019-14615 Upstream summary: Intel reports: .A potential security vulnerability in Intel(R) Processor Graphics may allow information […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2013-7456 CVE-2016-4343 CVE-2016-5093 CVE-2016-5094 CVE-2016-5096 Upstream summary: The PHP Group reports: Core: Fixed bug #72114 (Integer underflow / arbitrary null write in fread/gzread). (CVE-2016-5096) […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: foswiki — Script Insertion Vulnerability via unchecked user registration fields Related CVEs: CVE-2012-1004 Upstream summary: Foswiki team reports: When a new user registers, the new user can add arbitrary HTML […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: curl — TFTP packet buffer overflow vulnerability Related CVEs: CVE-2006-1061 Upstream summary: A Project cURL Security Advisory reports: libcurl uses the given file part of a TFTP URL in a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fcron — multiple vulnerabilities Related CVEs: CVE-2004-1030 CVE-2004-1031 CVE-2004-1032 CVE-2004-1033 Upstream summary: An iDEFENSE Security Advisory states: Multiple vulnerabilities have been found in Fcron. File contents disclosure Configuration Bypass Vulnerability […]