Midnightbsd vulnerabilities

Products

• Mport 13
• Midnightbsd 5

Newest

• midnightbsd mport mport trusts environment-controlled temporary directories in privileged metadata extraction CVE-2026-54584 5.3 MediumSeptember 21, 2026
• midnightbsd mport mport mirror-selection ping accepts insufficiently validated ICMP replies CVE-2026-54579 2.3 LowSeptember 17, 2026
• midnightbsd mport mport package installation has symlink TOCTOU in chown and chmod handling CVE-2026-54576 5.8 MediumSeptember 17, 2026
• midnightbsd mport mport directory asset installation is vulnerable to symlink and path traversal races CVE-2026-54587 5.8 MediumSeptember 17, 2026
• midnightbsd mport mport package fetch and clean paths are vulnerable to TOCTOU filesystem races CVE-2026-54575 5.8 MediumSeptember 17, 2026
• midnightbsd mport mport verify can compare stale checksum data after hashing failures CVE-2026-54578 2.0 LowSeptember 17, 2026
• midnightbsd mport mport permits repository and package mirror fetches over insecure transport CVE-2026-54586 6.0 MediumSeptember 17, 2026
• midnightbsd mport mport sample file handling can write outside the configured root CVE-2026-54585 6.0 MediumSeptember 17, 2026
• midnightbsd mport mport index decompression can leave partial or corrupt index data after zstd failures CVE-2026-54580 8.3 HighSeptember 17, 2026
• midnightbsd mport mport package installation can overwrite existing unmanaged or differently owned files CVE-2026-54582 6.0 MediumSeptember 17, 2026
• midnightbsd mport mport audit can inspect the wrong package when options are present CVE-2026-54577 2.0 LowSeptember 17, 2026
• midnightbsd mport mport package bundle downloads allow unsafe destination filenames CVE-2026-54583 8.3 HighSeptember 17, 2026
• midnightbsd mport mport bootstrap index fetch can continue after hash verification failure CVE-2026-54581 8.3 HighSeptember 17, 2026
• freebsd, midnightbsd +1 more In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer... CVE-2020-24385 5.5 MediumSeptember 3, 2020
• freebsd, midnightbsd +1 more A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD... CVE-2020-24863 5.5 MediumSeptember 3, 2020
• midnightbsd, mirbsd miros, netbsd +1 more +3 more The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5,... CVE-2009-0687 Public exploit 7.8 HighAugust 11, 2009
• bsd, bsdi bsd os, cisco catalyst blade switch 3020 firmware +16 more +18 more The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4)... CVE-2008-4609 Public exploitFix available EPSS 32.4% 7.1 HighOctober 20, 2008
• dragonflybsd, freebsd, midnightbsd +2 more +4 more Integer signedness error in the fw_ioctl (FW_IOCTL) function in the FireWire (IEEE-1394) drivers ... CVE-2006-6013 2.1 LowNovember 21, 2006