FR
Product
FreeBSD
595
CVEs
0
On KEV
10.0
Max CVSS
13
New 30D
Severity mix
Critical 35High 168Medium 83Low 9
Watch
Add FreeBSD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-1056 | – | Apr 20 | The Linux kernel before 2.6.16.9 and the FreeBSD kernel, when running on AMD64 and other 7th and 8th generation AuthenticAMD processors, only save/restore the FOP, FIP, and FDP… Affected: All versions, or not specified |
| CVE-2006-1283 | – | Mar 23 | opiepasswd in One-Time Passwords in Everything (OPIE) in FreeBSD 4.10-RELEASE-p22 through 6.1-STABLE before 20060322 uses the getlogin function to determine the invoking user… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1; 2.1.0; 2.1.5; +34 more |
| CVE-2006-0905 | – | Mar 23 | A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security… Affected: 4.8; 4.8; 4.8; 4.8; 4.9; 4.9; +30 more |
| CVE-2006-0883 | – | Mar 7 | OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates during PAM authentication, which allows remote attackers to… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +2 more |
| CVE-2006-0900 | – | Feb 27 | nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite Affected: 6.0 |
| CVE-2006-0433 | – | Feb 2 | Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote… Affected: 5.3; 5.4 |
| CVE-2006-0381 | – | Jan 25 | A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used,… Affected: 5.3; 5.3; 5.3; 5.3; 5.4; 5.4; +3 more |
| CVE-2006-0380 | – | Jan 25 | A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which… Affected: 5.4; 6.0 |
| CVE-2006-0379 | – | Jan 25 | FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory Affected: 5.4; 6.0 |
| CVE-2006-0226 | – | Jan 19 | Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute… Affected: 6.0; 6.0 |
| CVE-2006-0055 | – | Jan 11 | The ispell_op function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary… Affected: 4.10; 4.10; 4.10; 4.10; 4.11; 4.11; +22 more |
| CVE-2005-4351 | – | Dec 31 | The securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1.2, and Linux up to 2.6.15 allows root users to bypass immutable settings for files… Affected: through 6.0; 7.0 |
| CVE-2005-2359 | – | Aug 5 | The AES-XCBC-MAC algorithm in IPsec in FreeBSD 5.3 and 5.4, when used for authentication without other encryption, uses a constant key instead of the one that was assigned by the… Affected: 5.3; 5.4 |
| CVE-2005-2218 | – | Jul 26 | The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers,… Affected: 5.0; 5.0; 5.0; 5.0; 5.1; 5.1; +15 more |
| CVE-2005-2068 | – | Jul 5 | FreeBSD 4.x through 4.11 and 5.x through 5.4 allows remote attackers to modify certain TCP options via a TCP packet with the SYN flag set for an already established session Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +14 more |
| CVE-2005-2019 | – | Jul 5 | ipfw in FreeBSD 5.4, when running on Symmetric Multi-Processor (SMP) or Uni Processor (UP) systems with the PREEMPTION kernel option enabled, does not sufficiently lock certain… Affected: 5.4 |
| CVE-2005-0356 | – | May 31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +34 more |
| CVE-2005-1406 | – | May 6 | The kernel in FreeBSD 4.x to 4.11 and 5.x to 5.4 does not properly clear certain fixed-length buffers when copying variable-length data for use by applications, which could allow… Affected: 4.1; 4.2; 4.3; 4.4; 4.5; 4.6; +9 more |
| CVE-2005-1400 | – | May 6 | The i386_get_ldt system call in FreeBSD 4.7 to 4.11 and 5.x to 5.4 allows local users to access sensitive kernel memory via arguments with negative or very large values Affected: 4.7; 4.8; 4.9; 4.10; 4.11; 5.1; +3 more |
| CVE-2005-1399 | – | May 6 | FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on… Affected: 4.6; 4.7; 4.8; 4.9; 4.10; 4.11; +4 more |
| CVE-2005-0988 | – | May 2 | Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-0708 | – | May 2 | The sendfile system call in FreeBSD 4.8 through 4.11 and 5 through 5.4 can transfer portions of kernel memory if a file is truncated while it is being sent, which could allow… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-1126 | – | Apr 15 | The SIOCGIFCONF ioctl (ifconf function) in FreeBSD 4.x through 4.11 and 5.x through 5.4 does not properly clear a buffer before using it, which allows local users to obtain… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2005-0610 | – | Apr 12 | Multiple symlink vulnerabilities in portupgrade before 20041226_2 in FreeBSD allow local users to (1) overwrite arbitrary files and possibly replace packages to execute arbitrary… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2004-1066 | – | Jan 10 | The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows… Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +17 more |
| CVE-2004-1471 | – | Dec 31 | Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service… Affected: 1.1.5.1; 2.0; 2.0.5; 2.1.0; 2.1.5; 2.1.6; +34 more |
| CVE-2004-0919 | – | Dec 31 | The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates Affected: 5.0; 5.0; 5.0; 5.0; 5.1; 5.1; +6 more |
| CVE-2004-0618 | – | Dec 6 | FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument Affected: 4.10; 5.1; 5.1; 5.1; 5.1; 5.1; +1 more |
| CVE-2004-0602 | – | Dec 6 | The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges… Affected: 4.0; 5.0 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 4.8; 4.8; 4.9; 5.1; 5.1; 5.1; +2 more |
| CVE-2004-0435 | – | Aug 18 | Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache… Affected: 4.0; 4.8; 4.8; 4.8; 4.8; 4.9; +8 more |
| CVE-2004-0125 | – | Aug 6 | The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local… Affected: 4.0; 4.0; 4.0; 4.1; 4.1.1; 4.1.1; +34 more |
| CVE-2004-0370 | – | May 4 | The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read… Affected: 5.2 |
| CVE-2004-0126 | – | Mar 29 | The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local… Affected: 5.1; 5.1; 5.2; 5.2.1 |
| CVE-2004-0171 | – | Mar 15 | FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large… Affected: 4.6.2; 4.7; 4.8; 4.9; 5.0; 5.1; +1 more |
| CVE-2004-0114 | – | Mar 3 | The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a… Affected: through 5.2 |
| CVE-2004-0099 | – | Mar 3 | mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly… Affected: 5.1; 5.2.1 |
| CVE-2004-0002 | – | Mar 3 | The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large… Affected: 3.0; 3.0; 3.1; 3.2; 3.3; 3.4; +34 more |
| CVE-2003-1234 | – | Dec 31 | Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple… Affected: 1.1.5.1; 2.1.0; 2.1.5; 2.1.6; 2.1.6.1; 2.1.7; +34 more |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 4.4; 4.5; 4.6; 4.6.2; 4.7; 4.8; +2 more |
| CVE-2003-0804 | – | Nov 17 | The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of… Affected: 4.0; 4.1; 4.1.1; 4.2; 4.3; 4.4; +8 more |
| CVE-2003-0688 | – | Oct 20 | The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a… Affected: 4.6; 4.7; 4.8; 5.0 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 3.0; 4.0; 4.3; 4.3; 4.4; 4.4; +13 more |
| CVE-2003-0144 | – | Mar 31 | Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain… Affected: 2.2; 2.2.2; 2.2.3; 2.2.4; 2.2.5; 2.2.6 |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 4.0; 4.1; 4.1.1; 4.1.1; 4.1.1; 4.2; +17 more |
| CVE-2003-0078 | – | Mar 3 | ssl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a MAC computation if an incorrect block cipher padding is used, which causes an… Affected: 4.2; 4.3; 4.4; 4.5; 4.6; 4.7; +1 more |
| CVE-2003-0015 | – | Feb 7 | Double-free vulnerability in CVS 1.11.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed Directory request, as… Affected: 4.4; 4.5; 4.6; 4.7; 5.0 |
| CVE-2003-0001 | – | Jan 17 | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or… Affected: 4.2; 4.3; 4.4; 4.5; 4.6; 4.7 |
| CVE-2002-2092 | – | Dec 31 | Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process… Affected: 2.0; 2.1.0; 2.2; 2.2.2; 2.2.3; 2.2.4; +24 more |
The 500 most important CVEs for this product (exploited first, then by severity)