🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: freeradius — sql injection and denial of service vulnerability Upstream summary: A Gentoo Advisory reports: The FreeRADIUS server is vulnerable to an SQL injection attack and a buffer overflow, possibly […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rdesktop – critical – Remote Code Execution Related CVEs: CVE-2018-20174 CVE-2018-20175 CVE-2018-20176 CVE-2018-20177 CVE-2018-20178 CVE-2018-20179 CVE-2018-20180 CVE-2018-20181 +11 more Upstream summary: Fix memory corruption in process_bitmap_data – CVE-2018-8794 Fix remote […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ircII — denial of service Related CVEs: CVE-2021-29376 Upstream summary: Michael Ortmann reports: ircii has a bug in parsing CTCP UTC messages. Its unknown if this could also be used […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nebula — security fix for terrapin vulnerability Related CVEs: CVE-2023-48795 Upstream summary: Upstream reports: Security fix: Update golang.org/x/crypto, which includes a fix for CVE-2023-48795. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: End of Life Ports Upstream summary: These packages have reached End of Life status and/or have been removed from the Ports Tree. They may contain undocumented security issues. Please take […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: horde-imp — XSS vulnerability Upstream summary: The Horde team reports: Thanks to Naumann IT Security Consulting for reporting the XSS vulnerability. The major changes compared to IMP version H3 (4.3.7) […]
🟢 Low ⏱ 5–15 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: rsyslog8 — heap buffer overflow on receiving TCP syslog Related CVEs: CVE-2014-3634 CVE-2022-24903 Upstream summary: Rainer Gerhards reports: Modules for TCP syslog reception have a heap buffer overflow when octet-counted […]
🟠 High ⏱ 15–60 min Last verified: 16 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: 11/libX11 multiple vulnerabilities Related CVEs: CVE-2013-1981 CVE-2013-1982 CVE-2013-1983 CVE-2013-1984 CVE-2013-1985 CVE-2013-1986 CVE-2013-1987 CVE-2013-1988 +12 more Upstream summary: The X.Org project reports: CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms() When libX11 is […]
🟡 Medium ⏱ 10–30 min Last verified: 15 March 2024 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bash — remote code execution Related CVEs: CVE-2014-6271 CVE-2014-6277 CVE-2014-6278 CVE-2014-7169 CVE-2014-7186 CVE-2014-7187 Upstream summary: Note that this is different than the public "Shellshock" issue. Specially crafted environment variables could […]
