🟡 Medium ⏱ 10–30 min Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: bchunk — access violation near NULL on destination operand and crash Related CVEs: CVE-2017-15953 CVE-2017-15954 CVE-2017-15955 Upstream summary: Mitre reports: bchunk 1.2.0 and 1.2.1 is vulnerable to an "Access violation […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: firefox & mozilla — multiple vulnerabilities Related CVEs: CVE-2004-0762 CVE-2004-0765 CVE-2004-0904 CVE-2004-0905 CVE-2004-0908 CVE-2004-0909 CVE-2004-1156 CVE-2004-1157 +12 more Upstream summary: A Mozilla Foundation Security Advisory reports of multiple issues: Heap […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: exim — local privilege escalation Related CVEs: CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2011-0017 Upstream summary: exim.org reports: CVE-2011-0017 – check return value of setuid/setgid. This is a privilege escalation vulnerability whereby the […]
🟠 High ⏱ 15–60 min Last verified: 3 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: FreeBSD — Incorrect libcap_net limitation list manipulation Related CVEs: CAN-2005-2693 CAN-2005-3011 CVE-2003-0914 CVE-2003-0989 CVE-2003-1029 CVE-2004-0057 CVE-2004-0079 CVE-2004-0099 +12 more Upstream summary: Problem Description: In the case of the cap_net service, […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: xloadimage — buffer overflows in NIFF image title handling Related CVEs: CVE-2001-0775 CVE-2005-0638 CVE-2005-0639 CVE-2005-3178 Upstream summary: Ariel Berkman reports: Unlike most of the supported image formats in xloadimage, the […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ImageMagick and GraphicsMagick — DoS via specially crafted PNG file Related CVEs: CVE-2012-3438 Upstream summary: Kurt Seifried reports: There is an issue in ImageMagick that is also present in GraphicsMagick. […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ceph14 — HTTP header injection via CORS ExposeHeader tag Related CVEs: CVE-2020-10753 CVE-2020-1759 CVE-2020-1760 Upstream summary: Red Hat bugzilla reports: A flaw was found in the Red Hat Ceph Storage […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcp — remotely exploitable vulnerability Related CVEs: CVE-2018-5732 CVE-2018-5733 CVE-2021-25217 Upstream summary: Michael McNally reports: Program code used by the ISC DHCP package to read and parse stored leases has […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Subversion — Multiple vulnerabilities in server code Related CVEs: CVE-2021-28544 CVE-2022-24070 Upstream summary: Subversion project reports: Subversion servers reveal 'copyfrom' paths that should be hidden according to configured path-based authorization […]
🟢 Low ⏱ 5–15 min Last verified: 1 June 2022 Affected versions: FreeBSD 13 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: pyrad — multiple vulnerabilities Related CVEs: CVE-2013-0294 CVE-2013-0342 Upstream summary: Nathaniel McCallum reports: packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which […]
