NetBSD 9.4

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged xmp<2.6.0 for vulnerability class 'arbitrary-code-execution'. Reference: http://aluigi.altervista.org/adv/xmpbof-adv.txt Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2012-2451 Upstream summary: pkgsrc audit-packages flagged p5-Config-IniFiles<2.71 for vulnerability class 'privilege-escalation'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2451 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2018-5808 CVE-2018-5809 CVE-2015-8366 CVE-2015-8367 CVE-2020-24890 CVE-2020-24889 CVE-2017-6886 CVE-2017-6887  +12 more Upstream summary: pkgsrc audit-packages flagged libraw<0.15.2 for vulnerability class 'remote-system-access'. Reference: http://secunia.com/advisories/53547/ Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Upstream summary: pkgsrc audit-packages flagged ruby19-railties<3.0.4 for vulnerability class 'cross-site-request-forgeries'. Reference: http://weblog.rubyonrails.org/2011/2/8/csrf-protection-bypass-in-ruby-on-rails Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2010-2074 CVE-2023-38252 CVE-2023-38253 Upstream summary: pkgsrc audit-packages flagged w3m-img<0.3.2.1 for vulnerability class 'remote-file-write'. Reference: http://mi.med.tohoku.ac.jp/%7Esatodai/w3m-dev/200211.month/3492.html Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2009-1182 CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 Upstream summary: pkgsrc audit-packages flagged suse{,32}_libcups<11.3 for vulnerability class 'arbitrary-code-execution'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1182 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2006-2414 CVE-2019-11500 CVE-2020-10957 CVE-2020-10958 CVE-2020-10967 CVE-2020-12100 CVE-2020-12673 CVE-2020-12674  +12 more Upstream summary: pkgsrc audit-packages flagged dovecot>0.99.99<1.0beta8 for vulnerability class 'remote-file-listing'. Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2414 Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 Upstream summary: pkgsrc audit-packages flagged h8300-hms-binutils<2.25 for vulnerability class 'out-of-bounds-write'. Reference: http://www.cvedetails.com/cve/CVE-2014-8501/ Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read  •  Source: pkgsrc audit-packages entry Related CVEs: CVE-2017-14176 Upstream summary: pkgsrc audit-packages flagged bzr<2.6.0nb1 for vulnerability class 'arbitrary-command-execution'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-14176 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis […]