FreeBSD

🟡 Medium   ⏱ 10–30 min  Last verified: 24 January 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: PostgreSQL — SET ROLE, SET SESSION AUTHORIZATION reset to wrong user ID Related CVEs: CVE-2020-1720 CVE-2021-23214 CVE-2021-23222 CVE-2021-3677 CVE-2022-1552 CVE-2024-10976 CVE-2024-10978 CVE-2024-7348 Upstream summary: PostgreSQL project reports: Incorrect privilege assignment […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: libspf2 — Integer Underflow Remote Code Execution Related CVEs: CVE-2008-2469 CVE-2023-42118 Upstream summary: Trendmicro ZDI reports: Integer Underflow Remote Code Execution Vulnerability The specific flaw exists within the parsing of […]

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2024 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: OpenSSL — OOB memory access vulnerability Related CVEs: CVE-2023-5678 CVE-2023-6129 CVE-2023-6237 CVE-2024-0727 CVE-2024-2511 CVE-2024-4603 CVE-2024-4741 CVE-2024-5535  +2 more Upstream summary: The OpenSSL project reports: Low-level invalid GF(2^m) parameters lead to […]

🟠 High   ⏱ 15–60 min  Last verified: 24 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: MySQL — Multiple vulnerabilities Related CVEs: CVE-2015-3194 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836  +12 more Upstream summary: Oracle reports: This Critical Patch Update contains 49 new security patches for […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: The Update Framwork — path traversal vulnerability Related CVEs: CVE-2021-41131 Upstream summary: NVD reports: python-tuf is a Python reference implementation of The Update Framework (TUF). In both clients (`tuf/client` and […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: gtk-vnc — bounds checking vulnerabilities Related CVEs: CVE-2017-5884 CVE-2017-5885 Upstream summary: Daniel P. Berrange reports: CVE-2017-5884 – fix bounds checking for RRE, hextile and copyrect encodings CVE-2017-5885 – fix color […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: xpdf — multiple remote Stream.CC vulnerabilities Related CVEs: CVE-2004-0888 CVE-2004-0889 CVE-2004-1125 CVE-2005-0064 CVE-2005-2097 CVE-2007-3387 CVE-2007-4352 CVE-2007-5392  +1 more Upstream summary: Secunia Research reports: Secunia Research has discovered some vulnerabilities in […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2024 Affected versions: FreeBSD 14 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: ghostscript — exploitable buffer overflow in (T)BCP in PS interpreter Related CVEs: CVE-2015-3228 CVE-2023-28879 Upstream summary: [email protected] reports: In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to […]