🟡 Medium ⏱ 10–30 min Last verified: 2 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: tcpreplay — Multiple vulnerabilities Related CVEs: CVE-2019-8376 CVE-2019-8377 CVE-2019-8381 Upstream summary: fklassen on Github reports: This release fixes the following security issues: memory access in do_checksum() NULL pointer dereference get_layer4_v6() […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: apache — heap overflow in mod_proxy Related CVEs: CVE-2004-0492 Upstream summary: A buffer overflow exists in mod_proxy which may allow an attacker to launch local DoS attacks and possibly execute […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: hiredis — integer/buffer overflow Related CVEs: CVE-2021-32765 Upstream summary: hiredis maintainers report: Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: png — memory corruption/possible remote code execution Related CVEs: CVE-2011-3048 Upstream summary: The PNG project reports: libpng fails to correctly handle malloc() failures for text chunks (in png_set_text_2()), which can […]
🟢 Low ⏱ 5–15 min Last verified: 1 September 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: krb5-appl — telnetd code execution vulnerability Related CVEs: CVE-2011-4862 Upstream summary: The MIT Kerberos Team reports: When an encryption key is supplied via the TELNET protocol, its length is not […]
🟢 Low ⏱ 5–15 min Last verified: 31 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: gnomevfs — unsafe URI handling Related CVEs: CVE-2004-0494 Upstream summary: Alexander Larsson reports that some versions of gnome-vfs and MidnightCommander contain a number of `extfs' scripts that do not properly […]
🟢 Low ⏱ 5–15 min Last verified: 30 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-django-photologue — XSS vulnerability Related CVEs: CVE-2022-4526 Upstream summary: domiee13 reports: A vulnerability was found in django-photologue up to 3.15.1 and classified as problematic. Affected by this issue is some […]
🟢 Low ⏱ 5–15 min Last verified: 30 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-djblets — Self-XSS vulnerability Upstream summary: Djblets Release Notes reports: A recently-discovered vulnerability in the datagrid templates allows an attacker to generate a URL to any datagrid page containing malicious […]
🟢 Low ⏱ 5–15 min Last verified: 30 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php5-sqlite — open_basedir bypass Related CVEs: CVE-2012-3365 Upstream summary: MITRE CVE team reports: The SQLite functionality in PHP before 5.3.15 allows remote attackers to bypass the open_basedir protection mechanism via […]
🟠 High ⏱ 15–60 min Last verified: 30 August 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: go — excessive resource consumption Related CVEs: CVE-2015-5739 CVE-2015-5740 CVE-2015-5741 CVE-2015-8618 CVE-2016-3959 CVE-2019-16276 CVE-2020-16845 CVE-2020-24553 +12 more Upstream summary: The Go project reports: Within HostnameError.Error(), when constructing an error string, […]
