NE
Product
Netbsd
168
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 10Medium 3Low 1
Watch
Add Netbsd to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1000378 | 9.8 | Jun 19 | The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse… Affected: through 7.1 |
| CVE-2017-1000375 | 9.8 | Jun 19 | NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary… Affected: through 7.1 |
| CVE-2017-1000374 | 9.8 | Jun 19 | A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries Affected: through 7.1 |
| CVE-2015-8212 | 9.8 | Jan 19 | CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via crafted arguments, which are handled… Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +8 more |
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 1.5 through 1.6.1 |
Showing 5