🟢 Low ⏱ 5–15 min Last verified: 15 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: sdl_image — buffer overflow vulnerabilities Related CVEs: CVE-2007-6697 CVE-2008-0544 Upstream summary: Secunia reports: Two vulnerabilities have been reported in SDL_image, which can be exploited by malicious people to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 15 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — Denial of Service Related CVEs: CVE-2015-8605 Upstream summary: ISC reports: A badly formed packet with an invalid IPv4 UDP length field can cause a DHCP server, client, or […]
🟠 High ⏱ 15–60 min Last verified: 14 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: unbound — Possible domain hijacking via promiscuous records in the authority section Related CVEs: CVE-2011-1922 CVE-2011-4528 CVE-2014-8602 CVE-2017-15105 CVE-2019-16866 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 +10 more Upstream summary: [email protected] reports: NLnet Labs […]
🟠 High ⏱ 15–60 min Last verified: 14 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: PostgreSQL — Possible man-in-the-middle attacks Related CVEs: CVE-2016-5423 CVE-2016-5424 CVE-2017-15098 CVE-2017-15099 CVE-2017-7546 CVE-2017-7547 CVE-2017-7548 CVE-2018-1052 +11 more Upstream summary: The PostgreSQL Project reports: CVE-2021-23214: A man-in-the-middle with the ability to […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: aide — heap-based buffer overflow Related CVEs: CVE-2021-45417 Upstream summary: David Bouman reports: AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS […]
🟡 Medium ⏱ 10–30 min Last verified: 14 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pspp — multiple vulnerabilities Related CVEs: CVE-2017-10791 CVE-2017-10792 CVE-2017-12958 CVE-2017-12959 CVE-2017-12960 CVE-2017-12961 Upstream summary: CVE Details reports: There is an Integer overflow in the hash_int function of the libpspp library […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2025 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-setuptools — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Related CVEs: CVE-2025-47273 Upstream summary: https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, […]
🟢 Low ⏱ 5–15 min Last verified: 14 February 2025 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: step-certificates — Authorization Bypass in ACME and SCEP Provisioners Related CVEs: CVE-2025-44005 Upstream summary: smallstep reports: An attacker can bypass authorization checks and force a Step CA ACME or SCEP […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: mathopd — directory traversal vulnerability Upstream summary: Michiel Boland reports: The software has a vulnerability that could lead to directory traversal if the '*' construct for mass virtual hosting is […]
🟢 Low ⏱ 5–15 min Last verified: 13 February 2025 Affected versions: FreeBSD 14 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: kstars — exploitable set-user-ID application fliccd Related CVEs: CVE-2005-0011 Upstream summary: A KDE Security Advisory explains: Overview KStars includes support for the Instrument Neutral Distributed Interface (INDI). The build system […]
