🟢 Low ⏱ 5–15 min Last verified: 3 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: liveMedia — potential remote code execution Related CVEs: CVE-2007-6036 CVE-2018-4013 Upstream summary: Talos reports: An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: isc-dhcpd — Denial of Service Related CVEs: CVE-2015-8605 Upstream summary: ISC reports: A badly formed packet with an invalid IPv4 UDP length field can cause a DHCP server, client, or […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ampache — insecure temporary file usage Related CVEs: CVE-2008-3929 Upstream summary: Secunia reports: A security issue has been reported in Ampache, which can be exploited by malicious, local users to […]
🟡 Medium ⏱ 10–30 min Last verified: 2 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: libpng stack-based buffer overflow and other code concerns Related CVEs: CVE-2004-0597 CVE-2004-0598 CVE-2004-0599 Upstream summary: Chris Evans has discovered multiple vulnerabilities in libpng, which can be exploited by malicious people […]
🟢 Low ⏱ 5–15 min Last verified: 2 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: py-bleach — regular expression denial-of-service Related CVEs: CVE-2020-6817 Upstream summary: Bleach developers reports: bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to […]
🟡 Medium ⏱ 10–30 min Last verified: 1 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Apache 1.3 — mod_proxy reverse proxy exposure Related CVEs: CVE-2004-0940 CVE-2005-2088 CVE-2005-3352 CVE-2006-3747 CVE-2011-3368 Upstream summary: Apache HTTP server project reports: An exposure was found when using mod_proxy in reverse […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: p5-PathTools — File::Spec::canonpath loses taint Related CVEs: CVE-2015-8607 Upstream summary: Ricardo Signes reports: Beginning in PathTools 3.47 and/or perl 5.20.0, the File::Spec::canonpath() routine returned untained strings even if passed tainted […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Ruby — XSS exploit of RDoc documentation generated by rdoc Related CVEs: CVE-2013-0256 Upstream summary: Ruby developers report: RDoc documentation generated by rdoc bundled with ruby are vulnerable to an […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: testdisk — buffer overflow with malicious disk image Upstream summary: CGSecurity TestDisk Changelog reports: Various fix including security fix, thanks to: Coverity scan (Static Analysis of source code) afl-fuzz (security-oriented […]
🟢 Low ⏱ 5–15 min Last verified: 29 February 2020 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: courier-imap — format string vulnerability in debug mode Related CVEs: CVE-2004-0224 CVE-2004-0777 Upstream summary: An iDEFENSE security advisory describes a format string vulnerability that could be exploited when Courier-IMAP is […]
