FR
Product
FreeBSD
595
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 83Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24863 | 5.5 | Sep 3 | A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an… Affected: through 11.4 |
| CVE-2020-24385 | 5.5 | Sep 3 | In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the… Affected: through 7.0 |
| CVE-2020-13434 | 5.5 | May 24 | SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c Affected: 11.0 before 11.4; 11.4; 11.4; 12.0; 12.0; 12.0; +18 more |
| CVE-2020-7455 | 5.5 | May 13 | In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +10 more |
| CVE-2019-15877 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller… Affected: 12.1; 12.1; 12.1 |
| CVE-2019-15876 | 5.5 | Apr 28 | In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2019-5595 | 5.5 | Feb 12 | In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not properly sanitized before return from… Affected: FreeBSD 11.2 before 11.2-RELEASE-p9 and 12.0 before 12.0-RELEASE-p3 |
| CVE-2018-6925 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maintenance of IPv6 protocol control block… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17155 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient initialization of memory copied to… Affected: before 11.2; 10.4; 10.4; 11.1; 11.2 |
| CVE-2018-17154 | 5.5 | Sep 28 | In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4_getfsstat system call, a NULL pointer… Affected: before 11.2; 11.1; 11.2 |
| CVE-2018-6921 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel… Affected: 11.0 before 11.1 |
| CVE-2018-6920 | 5.5 | May 8 | In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux… Affected: 10.0 before 10.4; 11.0 before 11.1 |
| CVE-2015-5677 | 5.5 | Feb 7 | bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication… Affected: 9.3; 10.1; 10.2 |
| CVE-2002-1915 | 5.5 | Dec 31 | tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file Affected: 3.5; 3.5.1; 4.0; 4.1; 4.1.1; 4.2; +5 more |
| CVE-1999-0783 | 5.5 | Jun 16 | FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system Affected: 2.2 |
| CVE-2025-24934 | 5.4 | Oct 22 | SO_REUSEPORT_LB breaks connect(2) for UDP sockets Affected: 15.0-BETA2 before p1; 14.3-RELEASE before p5; 13.5-RELEASE before p6 |
| CVE-2024-39281 | 5.3 | Nov 12 | Unbounded allocation in ctl(4) CAM Target Layer Affected: 14.1-RELEASE before p6; 13.4-RELEASE before p2; 13.3-RELEASE before p8 |
| CVE-2024-6759 | 5.3 | Aug 11 | NFS client accepts file names containing path separators Affected: 14.1-RELEASE before p3; 14.0-RELEASE before p9; 13.3-RELEASE before p5 |
| CVE-2023-51765 | 5.3 | Dec 24 | sendmail through 8.17.2 allows SMTP smuggling in certain configurations Affected: before 11.0 |
| CVE-2020-7464 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4)… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +23 more |
| CVE-2020-25579 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25578 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +17 more |
| CVE-2020-25580 | 5.3 | Mar 26 | In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access(5) rule processor has the… Affected: 11.4; 11.4; 11.4; 11.4; 11.4; 11.4; +6 more |
| CVE-2020-7451 | 5.3 | Apr 28 | In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK or challenge TCP-ACK… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +4 more |
| CVE-2018-6922 | 5.3 | Aug 9 | One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p10 uses an inefficient algorithm to… Affected: All versions prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, 10.4-RELEASE-p10 |
| CVE-2017-13088 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM)… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13087 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13081 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13080 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13079 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an… Affected: 10; 10.4; 11; 11.1 |
| CVE-2017-13078 | 5.3 | Oct 17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames… Affected: 10; 10.4; 11; 11.1 |
| CVE-2016-2518 | 5.3 | Jan 30 | The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer request with a large… Affected: 9.3; 9.3; 9.3; 9.3; 9.3; 9.3; +34 more |
| CVE-2006-0054 | 5.3 | Jan 11 | The ipfw firewall in FreeBSD 6.0-RELEASE allows remote attackers to cause a denial of service (firewall crash) via ICMP IP fragments that match a reset, reject or unreach action,… Affected: 6.0 |
| CVE-2025-0662 | 4.9 | Jan 30 | Uninitialized kernel memory disclosure via ktrace(2) Affected: 14.2-RELEASE before p1 |
| CVE-2022-23089 | 4.7 | Feb 15 | Out of bound read in elf_note_prpsinfo() Affected: 13.1-RELEASE before p1; 13.0-RELEASE before p12; 12.3-RELEASE before p6 |
| CVE-2022-23091 | 4.0 | Feb 15 | Memory disclosure by stale virtual memory mapping Affected: 13.1-RELEASE before p1; 13.0-RELEASE before p12; 12.3-RELEASE before p6 |
| CVE-2011-1075 | 3.7 | Oct 19 | FreeBSD's crontab calculates the MD5 sum of the previous and new cronjob to determine if any changes have been made before copying the new version in Affected: All versions, or not specified |
| CVE-2019-9495 | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns Affected: 11.2; 11.2; 11.2; 11.2; 11.2; 11.2; +8 more |
| CVE-2026-49423 | 3.3 | Aug 19 | Remote DOS via uninitialized memory access in KTLS receive Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-49426 | 3.3 | Aug 19 | Incorrect audit records for ptrace(2) syscall requests Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2026-49431 | 3.3 | Aug 19 | Incorrect user validation in ZFS_IOC_SET_PROP ioctl Affected: 15.1-RELEASE before p1; 15.0-RELEASE before p11; 14.4-RELEASE before p7; 14.3-RELEASE before p16 |
| CVE-2024-25941 | 3.3 | Feb 15 | jail(2) information leak Affected: 14.0-RELEASE before p5; 13.2-RELEASE before p10 |
| CVE-2019-15875 | 3.3 | Feb 18 | In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before… Affected: 11.3; 11.3; 11.3; 11.3; 11.3; 11.3; +14 more |
| CVE-2017-1086 | 3.3 | Nov 16 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant… Affected: All supported versions of FreeBSD |
| CVE-2017-1088 | 3.3 | Nov 16 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not properly clear the memory of the… Affected: All supported versions of FreeBSD |
| CVE-2014-8611 | – | Sep 18 | The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows… Affected: 10.1 |
| CVE-2015-1415 | – | Apr 10 | The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key),… Affected: through 10.1; 10.0; 10.0; 10.0; 10.1; 10.1; +2 more |
| CVE-2015-1414 | – | Feb 27 | Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10 Affected: 8.4; 9.0; 9.1; 9.2; 9.3; 10.0; +1 more |
| CVE-2014-8613 | – | Feb 2 | The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 8.4; 9.3; 10.1 |
| CVE-2014-8612 | – | Feb 2 | Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allow local… Affected: 8.4; 9.3; 10.0; 10.1 |
The 500 most important CVEs for this product (exploited first, then by severity)