FreeBSD 14

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache22 — chunk header parsing defect Related CVEs: CVE-2012-0833 CVE-2012-2687 CVE-2012-3499 CVE-2012-4558 CVE-2013-1862 CVE-2013-1896 CVE-2013-5704 CVE-2013-6438  +5 more Upstream summary: Apache Foundation reports: CVE-2015-3183 core: Fix chunk header parsing defect. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-social-auth-app-django — Improper Handling of Case Sensitivity Related CVEs: CVE-2024-32879 Upstream summary: GitHub Advisory Database: Python Social Auth is a social authentication/registration mechanism. Prior to version 5.4.1, due to default […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jellyfin — Multiple vulnerabilities Related CVEs: CVE-2023-30626 CVE-2023-30627 Upstream summary: [email protected] reports: Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: graylog — remote code execution in log4j from user-controlled log input Related CVEs: CVE-2021-44228 CVE-2021-45046 Upstream summary: Apache Software Foundation reports: It was found that the fix to address CVE-2021-44228 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: apache — Prevent chunk-size integer overflow on platforms where sizeof(int) < sizeof(long) Related CVEs: CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 Upstream summary: Apache ChangeLog reports: Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: sam2p — multiple issues Related CVEs: CVE-2017-14628 CVE-2017-14629 CVE-2017-14630 CVE-2017-14631 CVE-2017-14636 CVE-2017-14637 Upstream summary: sam2p developers report: In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: go — invalid headers are normalized, allowing request smuggling Related CVEs: CVE-2019-16276 Upstream summary: The Go project reports: net/http (through net/textproto) used to accept and normalize invalid HTTP/1.1 headers with […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: glibc — gethostbyname buffer overflow Related CVEs: CVE-2015-0235 Upstream summary: Robert Krátký reports: GHOST is a 'buffer overflow' bug affecting the gethostbyname() and gethostbyname2() function calls in the glibc library. […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: samba — potential leakage of arbitrary memory contents Related CVEs: CVE-2008-4314 Upstream summary: Samba Team reports: Samba 3.0.29 and beyond contain a change to deal with gcc 4 optimizations. Part […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: fd_set — bitmap index overflow in multiple applications Upstream summary: 3APA3A reports: If programmer fails to check socket number before using select() or fd_set macros, it's possible to overwrite memory […]