FreeBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: couchdb — information sharing via couchjs processes Related CVEs: CVE-2012-5650 CVE-2017-12635 CVE-2017-12636 CVE-2018-11769 CVE-2018-17188 CVE-2018-8007 CVE-2021-39205 CVE-2023-26268 Upstream summary: Nick Vatamane reports: Design documents with matching document IDs, from databases […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2007-0905 CVE-2007-0906 CVE-2007-0907 CVE-2007-0908 CVE-2007-0909 CVE-2007-0910 CVE-2007-0988 CVE-2007-1001 Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 and PHP […]

🟠 High   ⏱ 15–60 min  Last verified: 9 June 2024 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: py-matrix-synapse — federation denial of service via malformed events Related CVEs: CVE-2020-26257 CVE-2020-26891 CVE-2021-29471 CVE-2021-39163 CVE-2021-39164 CVE-2021-41281 CVE-2022-31052 CVE-2024-31208  +7 more Upstream summary: element-hq/synapse developers report: A malicious server can […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: perdition — str_vwrite format string vulnerability Related CVEs: CVE-2007-5740 Upstream summary: SEC-Consult reports: Perdition IMAP is affected by a format string bug in one of its IMAP output-string formatting functions. […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: heartbeat — insecure temporary file creation vulnerability Related CVEs: CAN-2005-2231 Upstream summary: Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tiff — buffer overflow vulnerability Related CVEs: CVE-2004-0803 CVE-2004-0804 CVE-2004-0886 CVE-2004-1308 CVE-2005-1544 Upstream summary: A Gentoo Linux Security Advisory reports: Tavis Ormandy of the Gentoo Linux Security Audit Team discovered […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: cscope — multiple buffer overflows Related CVEs: CVE-2004-0996 CVE-2004-2541 CVE-2006-4262 CVE-2009-0148 CVE-2009-1577 Upstream summary: Secunia reports: Some vulnerabilities have been reported in Cscope, which potentially can be exploited by malicious […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: jansson — local denial of service vulnerabilities Related CVEs: CVE-2016-4425 Upstream summary: QuickFuzz reports: A crash caused by stack exhaustion parsing a JSON was found. Table of contents Symptom & […]

🟠 High   ⏱ 15–60 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: git — Multiple vulnerabilities Related CVEs: CVE-2015-7545 CVE-2016-2324 CVE-2018-11233 CVE-2018-11235 CVE-2020-11008 CVE-2020-5260 CVE-2022-39253 CVE-2022-39260  +2 more Upstream summary: git developers reports: This update includes 2 security fixes: CVE-2023-25652: By feeding […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php-imap — imap_open allows to run arbitrary shell commands via mailbox parameter Upstream summary: The PHP team reports: imap_open allows to run arbitrary shell commands via mailbox parameter. Table of […]