FreeBSD 13

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Related CVEs: CVE-2019-12387 CVE-2019-9512 CVE-2019-9514 CVE-2019-9515 CVE-2020-10108 CVE-2020-10109 Upstream summary: Twisted developers report: Cookie and Authorization headers are […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fontconfig — insufficiently cache file validation Related CVEs: CVE-2016-5384 Upstream summary: Debian security team reports: Tobias Stoeckmann discovered that cache files are insufficiently validated in fontconfig, a generic font configuration […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tin — buffer overflow vulnerabilities Upstream summary: Urs Janssen and Aleksey Salow report possible buffer overflows in tin versions 1.8.0 and 1.8.1. OpenPKG project elaborates there is an allocation off-by-one […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: spamdyke — Buffer Overflow Vulnerabilities Related CVEs: CVE-2008-2784 CVE-2012-0070 CVE-2012-0802 Upstream summary: Secunia reports: Fixed a number of very serious errors in the usage of snprintf()/vsnprintf(). The return value was […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: kdelibs — integer overflow in khtml Related CVEs: CVE-2004-0691 CVE-2004-0692 CVE-2004-0693 CVE-2006-4811 Upstream summary: Red Hat reports: An integer overflow flaw was found in the way Qt handled pixmap images. […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-twisted — cookie and authorization headers are leaked when following cross-origin redirects Upstream summary: Twisted developers report: Cookie and Authorization headers are leaked when following cross-origin redirects in twited.web.client.RedirectAgent and […]

🟠 High   ⏱ 15–60 min  Last verified: 5 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Dovecot — DoS Related CVEs: CVE-2008-4577 CVE-2008-4578 CVE-2009-3897 CVE-2011-1929 CVE-2017-15132 CVE-2017-2669 CVE-2019-10691 CVE-2019-11494  +12 more Upstream summary: Dovecot reports: A DoS is possible with a large number of address headers […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: DomainKeys Identified Mail (DKIM) Verifiers may inappropriately convey message trust Upstream summary: US-CERT reports: DomainKeys Identified Mail (DKIM) Verifiers may inappropriately convey message trust when messages are signed using test […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 July 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Open DC Hub — remote buffer overflow vulnerability Upstream summary: Donato Ferrante reported an exploitable buffer overflow in this software package. Any user that can login with 'admin' privileges can […]