Skip to contentFreebsd vulnerabilities
Newest
- freebsdIn FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...CVE-2019-56077.8 High
- freebsdIn FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...CVE-2019-56049.6 Critical
- freebsdIn FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before...CVE-2019-5603Public exploit7.8 High
- freebsdIn FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE...CVE-2019-56056.5 Medium
- freebsdIn FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE...CVE-2019-5602Public exploit8.8 High
- freebsdIn FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before...CVE-2019-56016.5 Medium
- freebsdIn FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE...CVE-2019-56009.8 Critical
- freebsdIn FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non...CVE-2019-55997.5 High
- bzip bzip2, canonical ubuntu linux, debian linux +17 more +19 moreBZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are...CVE-2019-12900Fix available9.8 Critical
- freebsdIn FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2...CVE-2019-55987.5 High
- freebsdIn FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10,...CVE-2019-55979.1 Critical
- w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 moreThe implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacksCVE-2019-9494Fix available5.9 Medium
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9499Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 moreThe implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-CommitCVE-2019-9498Fix available8.1 High
- w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 moreThe implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patternsCVE-2019-9495Fix available3.7 Low
- freebsdIn FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0...CVE-2019-5596Public exploit8.8 High
- freebsdIn FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE...CVE-2019-55955.5 Medium
- freebsd cvswebFreeBSD CVSweb version 2.x contains a Cross Site Scripting (XSS) vulnerability in all pages that...CVE-2018-1000998Fix available6.1 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE...CVE-2018-171619.8 Critical
- freebsdIn FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one...CVE-2018-1716010.0 Critical
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check...CVE-2018-171597.5 High
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur...CVE-2018-171587.5 High
- freebsdIn FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when...CVE-2018-17157EPSS 24.2%9.8 Critical
- freebsdIn FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for...CVE-2018-171565.9 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985),...CVE-2018-69255.5 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984),...CVE-2018-171555.5 Medium
- freebsdIn FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to...CVE-2018-171545.5 Medium
- freebsdIn FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE...CVE-2018-69247.1 High
- freebsdIn FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK...CVE-2017-1085Public exploit7.8 High
- freebsdIn FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page...CVE-2017-1084Public exploitEPSS 15.3%7.5 High
- freebsdIn FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This...CVE-2017-10837.5 High
- freebsdIn FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a...CVE-2017-10827.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is...CVE-2018-69237.5 High
- freebsdOne of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2...CVE-2018-69225.3 Medium
- bsd libc library, freebsd +1 moreThe BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflowCVE-2016-65599.8 Critical
- intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 moreSystem software utilizing Lazy FP state restore technique on systems using Intel Core-based...CVE-2018-3665Fix available5.6 Medium
- freebsdIn FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization...CVE-2018-69215.5 Medium
- freebsdIn FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE...CVE-2018-69205.5 Medium
- debian linux, freebsd, xen +8 more +10 moreA statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software...CVE-2018-8897Public exploitFix availableEPSS 18.5%7.8 High
- freebsdIn FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter...CVE-2017-10817.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...CVE-2018-69197.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...CVE-2018-69187.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28...CVE-2018-69177.5 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE...CVE-2018-69169.8 Critical
- ntp, canonical ubuntu linux, freebsd +1 more +3 moreBuffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote...CVE-2018-7183Fix availableEPSS 10.2%9.8 Critical
- freebsdThe routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1...CVE-2015-56746.5 Medium
- freebsdThe do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before...CVE-2015-14187.8 High
- freebsdLarry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and...CVE-2015-1416Fix available7.8 High
- freebsdIn FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3,...CVE-2017-10883.3 Low
- Show moreLoading…