FreeBSD

🟢 Low   ⏱ 5–15 min  Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mod_fcgid — possible heap buffer overwrite Related CVEs: CVE-2013-4365 Upstream summary: Apache Project reports: Fix possible heap buffer overwrite. Table of contents Symptom & Impact Environment & Reproduction Root Cause […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: krb5 — Double-free in KDC TGS processing Related CVEs: CVE-2014-5352 CVE-2014-5353 CVE-2014-5354 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423 CVE-2015-2694 CVE-2016-3120  +4 more Upstream summary: The MIT krb5 Team reports: When issuing a ticket […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: php — multiple vulnerabilities Related CVEs: CVE-2004-0594 CVE-2004-0595 CVE-2004-1019 CVE-2004-1065 CVE-2006-4481 CVE-2006-4482 CVE-2006-4483 CVE-2006-4484  +12 more Upstream summary: The PHP development team reports: Security Enhancements and Fixes in PHP 5.2.2 […]

🟠 High   ⏱ 15–60 min  Last verified: 23 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: Dovecot — DoS Related CVEs: CVE-2008-4577 CVE-2008-4578 CVE-2009-3897 CVE-2011-1929 CVE-2017-15132 CVE-2017-2669 CVE-2019-10691 CVE-2019-11494  +12 more Upstream summary: Dovecot reports: A DoS is possible with a large number of address headers […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: tptest — pwd Remote Stack Buffer Overflow Upstream summary: SecurityFocus reports: TPTEST is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code […]

🟠 High   ⏱ 15–60 min  Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: exim — SQL injection Related CVEs: CVE-2004-0400 CVE-2005-0021 CVE-2005-0022 CVE-2010-4345 CVE-2011-0017 CVE-2011-1407 CVE-2011-1764 CVE-2012-5671  +6 more Upstream summary: [email protected] reports: Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization […]

🟠 High   ⏱ 15–60 min  Last verified: 22 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: owncloud — multiple vulnerabilities Related CVEs: CVE-2013-2039 CVE-2013-2040 CVE-2013-2041 CVE-2013-2042 CVE-2013-2043 CVE-2013-2044 CVE-2013-2045 CVE-2013-2047  +9 more Upstream summary: Owncloud reports: Reflected XSS in OCS provider discovery (oC-SA-2016-001) Information Exposure Through […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: security/ossec-hids-* — root escalation via syscheck feature Related CVEs: CVE-2014-5284 CVE-2015-3222 Upstream summary: OSSEC reports: The CVE-2015-3222 vulnerability, which allows for root escalation via sys check has been fixed in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 June 2019 Affected versions: FreeBSD 12 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: mutt — denial of service via crafted mail message Related CVEs: CVE-2004-0078 CVE-2007-2683 CVE-2014-9116 Upstream summary: NVD reports: The write_one_header function in mutt 1.5.23 does not properly handle newline characters […]