FR
Product
FreeBSD
595
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 83Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-3014 | – | Aug 20 | The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus is running with /coda mounted, allows local users to read sensitive heap memory via… Affected: All versions, or not specified |
| CVE-2010-2693 | – | Jul 13 | FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local users to cause a denial of service (system… Affected: 7.1; 7.1; 7.1; 7.1; 7.1; 7.1; +8 more |
| CVE-2010-2022 | – | May 28 | jail.c in jail in FreeBSD 8.0 and 8.1-PRERELEASE, when the "-l -U root" options are omitted, does not properly restrict access to the current working directory, which might allow… Affected: 8.0; 8.1-prerelease |
| CVE-2010-2020 | – | May 28 | sys/nfsclient/nfs_vfsops.c in the NFS client in the kernel in FreeBSD 7.2 through 8.1-PRERELEASE, when vfs.usermount is enabled, does not validate the length of a certain fhsize… Affected: 7.2; 7.2; 7.2; 8.0; 8.1-prerelease |
| CVE-2010-1938 | – | May 28 | Off-by-one error in the __opiereadrec function in readrec.c in libopie in OPIE 2.4.1-test1 and earlier, as used on FreeBSD 6.4 through 8.1-PRERELEASE and other platforms, allows… Affected: 6; 6.4; 6.4; 6.4; 6.4; 6.4; +29 more |
| CVE-2010-0318 | – | Jan 15 | The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the… Affected: 7.1; 7.2; 8.0 |
| CVE-2009-4358 | – | Dec 20 | freebsd-update in FreeBSD 8.0, 7.2, 7.1, 6.4, and 6.3 uses insecure permissions in its working directory (/var/db/freebsd-update by default), which allows local users to read… Affected: 6.3; 6.4; 7.1; 7.2; 8.0 |
| CVE-2009-4147 | – | Dec 2 | The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2) LD_LIBRARY_PATH, (3)… Affected: 7.1; 8.0 |
| CVE-2009-4146 | – | Dec 2 | The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1, 7.2, and 8.0 does not clear the LD_PRELOAD environment variable, which allows… Affected: 7.1; 7.2; 8.0 |
| CVE-2009-3527 | – | Oct 6 | Race condition in the Pipe (IPC) close function in FreeBSD 6.3 and 6.4 allows local users to cause a denial of service (crash) or gain privileges via vectors related to kqueues,… Affected: 6.3; 6.4 |
| CVE-2009-2649 | – | Jul 30 | The IATA (ata) driver in FreeBSD 6.0 and 8.0, when read access to /dev is available, allows local users to cause a denial of service (kernel panic) via a certain IOCTL request… Affected: 6.0; 8.0 |
| CVE-2009-0689 | – | Jul 1 | Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating… Affected: 6.4; 6.4; 6.4; 6.4; 6.4; 6.4; +4 more |
| CVE-2009-2208 | – | Jun 25 | FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by… Affected: 6.3; 6.3; 6.3; 6.3; 6.3; 6.3; +20 more |
| CVE-2009-1935 | – | Jun 18 | Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and… Affected: 6.3; 6.3; 6.3_releng; 6.4; 6.4; 6.4; +9 more |
| CVE-2009-1436 | – | Apr 27 | The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users… Affected: 6.3; 6.3; 6.4; 6.4; 6.4; 7.0; +4 more |
| CVE-2009-1041 | – | Mar 26 | The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value Affected: 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +7 more |
| CVE-2009-0641 | – | Feb 20 | sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which… Affected: 7.0; 7.0; 7.0; 7.0-release; 7.0_beta4; 7.0_releng; +2 more |
| CVE-2008-5736 | – | Dec 26 | Multiple unspecified vulnerabilities in FreeBSD 6 before 6.4-STABLE, 6.3 before 6.3-RELEASE-p7, 6.4 before 6.4-RELEASE-p1, 7.0 before 7.0-RELEASE-p7, 7.1 before 7.1-RC2, and 7… Affected: 6.0; 6.3; 6.3; 6.3; 6.3; 6.3; +11 more |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: 0.4_1; 1.0; 1.1; 1.1.5; 1.1.5.1; 1.2; +34 more |
| CVE-2008-2476 | – | Oct 3 | The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS,… Affected: 6.3; 7.1 |
| CVE-2008-4247 | – | Sep 25 | ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote… Affected: 7.0 |
| CVE-2008-2464 | – | Sep 11 | The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME, when INET6 is enabled, allows remote attackers to cause a denial of service… Affected: All versions, or not specified |
| CVE-2008-3890 | – | Sep 5 | The kernel in FreeBSD 6.3 through 7.0 on amd64 platforms can make an extra swapgs call after a General Protection Fault (GPF), which allows local users to gain privileges by… Affected: 6.3; 7.0 |
| CVE-2008-3531 | – | Sep 5 | Stack-based buffer overflow in sys/kern/vfs_mount.c in the kernel in FreeBSD 7.0 and 7.1, when vfs.usermount is enabled, allows local users to gain privileges via a crafted (1)… Affected: 7.0; 7.1 |
| CVE-2008-3530 | – | Sep 5 | sys/netinet6/icmp6.c in the kernel in FreeBSD 6.3 through 7.1, NetBSD 3.0 through 4.0, and possibly other operating systems does not properly check the proposed new MTU in an… Affected: 6.3; 7.0; 7.1 |
| CVE-2008-1391 | – | Mar 27 | Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary… Affected: 6.0; 6.0; 6.0; 6.0_p5_release; 7.0; 7.0; +2 more |
| CVE-2008-1215 | – | Mar 9 | Stack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka user-ppp), as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the… Affected: 6.3; 7.0 |
| CVE-2008-0777 | – | Feb 15 | The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents… Affected: 5.5; 6.2; 6.3; 7.0 |
| CVE-2008-0217 | – | Jan 16 | The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as… Affected: 5.0; 5.5; 6.0; 6.1; 6.2; 7.0; +1 more |
| CVE-2008-0216 | – | Jan 16 | The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the… Affected: 6.0; 6.0; 6.0; 6.1; 6.1; 6.1; +7 more |
| CVE-2007-6150 | – | Nov 30 | The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed… Affected: 5.5; 6.1; 6.2; 6.3; 7.0 |
| CVE-2007-3722 | – | Jul 12 | The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial… Affected: All versions, or not specified |
| CVE-2007-3721 | – | Jul 12 | The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service… Affected: All versions, or not specified |
| CVE-2007-0267 | – | Jan 17 | The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by… Affected: 6.1 |
| CVE-2007-0229 | – | Jan 13 | Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted… Affected: 6.1 |
| CVE-2007-0166 | – | Jan 11 | The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted,… Affected: through 6.2; 5.3 |
| CVE-2006-6397 | – | Dec 8 | Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner Affected: 6.2 |
| CVE-2006-6013 | – | Nov 21 | Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers (dev/firewire/fwdev.c) in various BSD kernels, including DragonFlyBSD, FreeBSD… Affected: 5.5 |
| CVE-2006-5824 | – | Nov 9 | Integer overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a denial of service (kernel panic) and trigger a heap-based buffer overflow via a crafted… Affected: 6.1 |
| CVE-2006-5680 | – | Nov 9 | The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed… Affected: 6 |
| CVE-2006-5679 | – | Nov 3 | Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS… Affected: 6.1 |
| CVE-2006-5550 | – | Oct 26 | The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto Affected: 6.1; 6.1; 6.1 |
| CVE-2006-5483 | – | Oct 24 | p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be settable by root Affected: 6.1 |
| CVE-2006-5482 | – | Oct 24 | ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is… Affected: 6.1 |
| CVE-2006-4516 | – | Oct 12 | Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large… Affected: 6.0 |
| CVE-2006-4178 | – | Sep 26 | Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via… Affected: through 5.5; 5.2; 5.2.1; 5.3; 5.4 |
| CVE-2006-4172 | – | Sep 26 | Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and… Affected: through 5.5; 5.2; 5.2.1; 5.3; 5.4 |
| CVE-2006-4304 | – | Aug 24 | Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to… Affected: 4.11; 5.3; 5.4; 5.5; 6.0; 6.1 |
| CVE-2006-2655 | – | Jun 2 | The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +9 more |
| CVE-2006-2654 | – | Jun 2 | Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences Affected: 5.0; 5.0; 5.0; 5.0; 5.0; 5.1; +21 more |
The 500 most important CVEs for this product (exploited first, then by severity)