FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 20 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2015-3228 CVE-2018-15908 CVE-2018-15909 CVE-2018-15910 CVE-2018-15911 CVE-2019-14811 CVE-2019-14812 CVE-2019-14813  +4 more Upstream summary: [email protected] reports: In Artifex Ghostscript through […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/trousers — several vulnerabilities Related CVEs: CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 Upstream summary: the TrouSerS project reports reports: If the tcsd daemon is started with root privileges, it fails to drop the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Multiple implementations — DoS via hash algorithm collision Related CVEs: CVE-2011-4815 CVE-2011-4838 CVE-2011-5036 CVE-2011-5037 Upstream summary: oCERT reports: A variety of programming languages suffer from a denial-of-service (DoS) condition against […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: XFCE — Allows executing malicious .desktop files pointing to remote code Related CVEs: CVE-2022-32278 Upstream summary: XFCE Project reports: Prevent executing possibly malicious .desktop files from online sources (ftp://, http:// […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pear-PEAR — PEAR installer arbitrary code execution vulnerability Upstream summary: Gregory Beaver reports: A standard feature of the PEAR installer implemented in all versions of PEAR can lead to the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: helvis — arbitrary file deletion problem Related CVEs: CVE-2005-0118 CVE-2005-0119 CVE-2005-0120 Upstream summary: The setuid root elvprsv utility, used to preserve recovery helvis files, can be abused by local users […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gnutls — multiple certificate verification issues Related CVEs: CVE-2006-4790 CVE-2009-1415 CVE-2009-1416 CVE-2009-1417 CVE-2009-2730 CVE-2012-1569 CVE-2012-1573 CVE-2014-0092  +1 more Upstream summary: GnuTLS project reports: A vulnerability was discovered that affects the […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: zgv, xzgv — heap overflow vulnerability Related CVEs: CVE-2004-0994 CVE-2006-1060 Upstream summary: Gentoo reports: Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with […]

🟠 High   ⏱ 15–60 min  Last verified: 18 November 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157  +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]