🟢 Low ⏱ 5–15 min Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: nap allows arbitrary file access Upstream summary: According to the author: Fixed security loophole which allowed remote clients to access arbitrary files on our system. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: newspost — server response buffer overflow vulnerability Related CVEs: CVE-2005-0101 Upstream summary: The newspost program uses a function named socket_getline to read server responses from the network socket. Unfortunately this […]
🟠 High ⏱ 15–60 min Last verified: 1 August 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ffmpeg — multiple vulnerabilities Related CVEs: CVE-2011-3892 CVE-2011-3893 CVE-2011-3895 CVE-2011-3929 CVE-2011-3936 CVE-2011-3937 CVE-2011-3940 CVE-2011-3945 +12 more Upstream summary: NVD reports: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: Supervisord — An authenticated client can run arbitrary shell commands via malicious XML-RPC requests Related CVEs: CVE-2017-11610 Upstream summary: mnaberez reports: supervisord can be configured to run an HTTP server […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: milter-bogom — headerless message crash Upstream summary: Juan J. Marítnez reports: The milter crashes while processing a headerless message Impact: bogom crashes and sendmail moves it to error state Table […]
🟠 High ⏱ 15–60 min Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: ansible – Vault password leak from temporary file Related CVEs: CVE-2013-2233 CVE-2013-4259 CVE-2013-4260 CVE-2014-4678 CVE-2014-4966 CVE-2015-3908 CVE-2015-6240 CVE-2016-3096 +5 more Upstream summary: Borja Tarraso reports: A flaw was found in […]
🟢 Low ⏱ 5–15 min Last verified: 31 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: zebra/quagga denial of service vulnerability Related CVEs: CVE-2003-0858 Upstream summary: A remote attacker could cause zebra/quagga to crash by sending a malformed telnet command to their management port. Table of […]
🟢 Low ⏱ 5–15 min Last verified: 30 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: avahi — denial of service Related CVEs: CVE-2010-2244 CVE-2011-1002 Upstream summary: Avahi developers reports: A vulnerability has been reported in Avahi, which can be exploited by malicious people to cause […]
🟢 Low ⏱ 5–15 min Last verified: 30 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: php-gd and gd — Buffer over-read into uninitialized memory Related CVEs: CVE-2017-7890 Upstream summary: PHP developers report: The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka […]
🟠 High ⏱ 15–60 min Last verified: 30 July 2019 Affected versions: FreeBSD 12 📖 ~4 min read • Source: FreeBSD VuXML VuXML topic: clamav — ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Related CVEs: CVE-2004-0270 CVE-2005-0133 CVE-2005-1922 CVE-2005-1923 CVE-2005-2919 CVE-2005-2920 CVE-2006-0162 CVE-2006-1614 +12 more Upstream summary: Cisco reports: A vulnerability in […]
