FR
Product
FreeBSD
595
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 83Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-7455 | 5.5 | May 13 | In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +10 more |
| CVE-2019-15877 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller… Affected: 12.1; 12.1; 12.1 |
| CVE-2019-15876 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2019-5595 | 5.5 | Feb 12 | In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from… Affected: FreeBSD 11.2 before 11.2-RELEASE-p9 and 12.0 before 12.0-RELEASE-p3 |
| CVE-2018-6925 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17155 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17154 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer… Affected: before 11.2; 11.1; 11.2 |
| CVE-2018-6921 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel… Affected: 11.0 before 11.1 |
| CVE-2018-6920 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2015-5677 | 5.5 | Feb 7 | bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication… Affected: 9.3; 10.1; 10.2 |
| CVE-2002-1915 | 5.5 | Dec 31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file Affected: 3.5; 3.5.1; 4.0; 4.1; 4.1.1; 4.2; +5 more |
| CVE-1999-0783 | 5.5 | Jun 16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system Affected: 2.2 |
| CVE-2025-24934 | 5.4 | Oct 22 | SO_REUSEPORT_LB breaks connect(2) for UDP sockets Affected: 15.0-BETA2 before p1; 14.3-RELEASE before p5; 13.5-RELEASE before p6 |
| CVE-2024-39281 | 5.3 | Nov 12 | Unbounded allocation in ctl(4) CAM Target Layer Affected: 14.1-RELEASE before p6; 13.4-RELEASE before p2; 13.3-RELEASE before p8 |
| CVE-2024-6759 | 5.3 | Aug 11 | NFS client accepts file names containing path separators Affected: 14.1-RELEASE before p3; 14.0-RELEASE before p9; 13.3-RELEASE before p5 |
| CVE-2023-51765 | 5.3 | Dec 24 | sendmail through 8.17.2 allows SMTP smuggling in certain configurations Affected: before 11.0 |
| CVE-2020-7464 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4)… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +23 more |
| CVE-2020-25580 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +6 more |
| CVE-2020-25579 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25578 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-7451 | 5.3 | Apr 28 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK or challenge TCP-ACK… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2018-6922 | 5.3 | Aug 9 | One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to… Affected: All versions prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, 10.4-RELEASE-p10 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 10; 10.4; 11; 11.1 |
| CVE-2016-2518 | 5.3 | Jan 30 | The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large… Affected: 9.3; 9.3; 9.3; 9.3; 9.3; 9.3; +34 more |
| CVE-2006-0054 | 5.3 | Jan 11 | The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action,… Affected: 6.0 |
| CVE-2025-0662 | 4.9 | Jan 30 | Uninitialized kernel memory disclosure via ktrace(2) Affected: 14.2-RELEASE before p1 |
| CVE-2022-23089 | 4.7 | Feb 15 | Out of bound read in elf_note_prpsinfo() Affected: 13.1-RELEASE before p1; 13.0-RELEASE before p12; 12.3-RELEASE before p6 |
| CVE-2022-23091 | 4.0 | Feb 15 | Memory disclosure by stale virtual memory mapping Affected: 13.1-RELEASE before p1; 13.0-RELEASE before p12; 12.3-RELEASE before p6 |
The 500 most important CVEs for this product (exploited first, then by severity)