Netbsd vulnerabilities

Products

• Netbsd 168
• Src 3
• Ftpd 2
• Tnftpd 2

Newest

• openbsd, netbsd src +1 more OpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS Input CVE-2026-56099 6.9 MediumJune 18, 2026
• netbsd src NetBSD cryptodev Race Condition Double-Free via cryptodev_op() CVE-2026-32848 5.7 MediumMay 18, 2026
• netbsd src NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c CVE-2026-32849 5.7 MediumMay 18, 2026
• openbsd openssh, almalinux, amazon linux +71 more +73 more Openssh: regresshion - race condition in ssh allows rce/dos CVE-2024-6387 Public exploitFix available EPSS 99.5% 8.1 HighJuly 1, 2024
• netbsd ftpd, tnftpd +1 more ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before... CVE-2023-45198 7.5 HighOctober 5, 2023
• netbsd In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG. CVE-2021-45484 7.5 HighDecember 25, 2021
• netbsd In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic... CVE-2021-45487 7.5 HighDecember 25, 2021
• netbsd In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm. CVE-2021-45488 7.5 HighDecember 25, 2021
• netbsd In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG. CVE-2021-45489 7.5 HighDecember 25, 2021
• netbsd, arista c-100 firmware, c-110 firmware +199 more +201 more An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames... CVE-2020-26139 Fix available 5.3 MediumMay 11, 2021
• freebsd, netbsd +1 more The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows... CVE-2012-5363 7.5 HighFebruary 20, 2020
• freebsd, netbsd +1 more The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows... CVE-2012-5365 7.5 HighFebruary 20, 2020
• freebsd, freebsd, netbsd netbsd +1 more Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and... CVE-2011-2480 7.5 HighNovember 27, 2019
• netbsd The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a... CVE-2017-1000378 9.8 CriticalJune 19, 2017
• netbsd NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is... CVE-2017-1000375 Public exploit EPSS 18.9% 9.8 CriticalJune 19, 2017
• netbsd A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass... CVE-2017-1000374 9.8 CriticalJune 19, 2017
• netbsd mail.local in NetBSD versions 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows local users to... CVE-2016-6253 Public exploit 7.8 HighJanuary 20, 2017
• netbsd CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows... CVE-2015-8212 Fix available 9.8 CriticalMay 26, 2016
• netbsd tnftpd The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11,... CVE-2015-5917 5.0 MediumOctober 9, 2015
• bsd, freebsd, netbsd +1 more +3 more The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly... CVE-2014-7250 5.0 MediumDecember 12, 2014
• netbsd, apple mac os x +1 more The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2... CVE-2014-8517 Public exploitFix available EPSS 69.1% 7.5 HighNovember 17, 2014
• freebsd, netbsd +1 more The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context... CVE-2014-5384 5.0 MediumAugust 21, 2014
• freebsd, netbsd +1 more The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context... CVE-2014-3951 5.0 MediumAugust 21, 2014
• eterna bozohttpd, netbsd +1 more bozotic HTTP server (aka bozohttpd) before 20140708, as used in NetBSD, truncates paths when... CVE-2014-5015 Fix available 5.0 MediumJuly 24, 2014
• openssl, apple mac os x, debian linux +17 more +19 more The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic... CVE-2014-3566 Public exploitFix available EPSS 100.0% 3.4 LowAugust 30, 2012
• freebsd, netbsd +1 more The ipalloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6.4 and NetBSD does... CVE-2007-6754 5.0 MediumJuly 25, 2012
• freebsd, netbsd +1 more Integer overflow in the calloc function in libc/stdlib/malloc.c in jemalloc in libc for FreeBSD 6... CVE-2006-7252 5.0 MediumJuly 25, 2012
• citrix xenserver, freebsd, illumos +8 more +10 more The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer... CVE-2012-0217 Public exploitFix available EPSS 39.6% 7.2 HighJune 12, 2012
• freebsd, netbsd +1 more The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD, NetBSD, and... CVE-2011-2393 7.8 HighFebruary 2, 2012
• freebsd, freetype, netbsd +2 more +4 more The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org... CVE-2011-2895 Fix available 9.3 HighAugust 12, 2011
• netbsd, pureftpd pure-ftpd +1 more The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly... CVE-2011-0418 Public exploitFix available 4.0 MediumMay 24, 2011
• ihji pmake, netbsd +1 more The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow... CVE-2011-1920 Fix available 3.3 LowMay 23, 2011
• apache http server, portable runtime, apple mac os x +7 more +9 more Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache... CVE-2011-0419 Public exploitFix available EPSS 30.4% 4.3 MediumMay 15, 2011
• netbsd Multiple stack consumption vulnerabilities in the kernel in NetBSD 4.0, 5.0 before 5.0.3, and 5.1... CVE-2011-1547 Public exploit 6.8 MediumMay 9, 2011
• freebsd, netbsd, openbsd +1 more +3 more The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH... CVE-2010-4755 4.0 MediumMarch 2, 2011
• apple mac os x, freebsd, netbsd +1 more +3 more The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and... CVE-2010-4754 4.0 MediumMarch 2, 2011
• apple mac os x, freebsd, netbsd +2 more Multiple integer signedness errors in smb_subr.c in the netsmb module in the kernel in NetBSD 5.0... CVE-2010-2530 4.9 MediumSeptember 29, 2010
• freebsd, netbsd +1 more The Coda filesystem kernel module, as used in NetBSD and FreeBSD, when Coda is loaded and Venus... CVE-2010-3014 1.2 LowAugust 20, 2010
• netbsd Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local... CVE-2010-0561 4.9 MediumFebruary 8, 2010
• netbsd The kernel in NetBSD, probably 5.0.1 and earlier, on x86 platforms does not properly handle a pre... CVE-2009-2793 Public exploit 4.6 MediumSeptember 18, 2009
• midnightbsd, mirbsd miros, netbsd +1 more +3 more The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5,... CVE-2009-0687 Public exploit 7.8 HighAugust 11, 2009
• netbsd libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of... CVE-2009-2483 4.9 MediumJuly 16, 2009
• netbsd The pam_unix module in OpenPAM in NetBSD 4.0 before 4.0.2 and 5.0 before 5.0.1 allows local users... CVE-2009-2482 6.9 MediumJuly 16, 2009
• freebsd, k-meleon project k-meleon, mozilla firefox +3 more +5 more Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka... CVE-2009-0689 Public exploitFix available EPSS 29.4% 6.8 MediumJuly 1, 2009
• bsd, bsdi bsd os, cisco catalyst blade switch 3020 firmware +16 more +18 more The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4)... CVE-2008-4609 Public exploitFix available EPSS 32.4% 7.1 HighOctober 20, 2008
• force10 ftos, freebsd, netbsd +3 more +5 more The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2)... CVE-2008-2476 9.3 HighOctober 3, 2008
• freebsd, netbsd, openbsd +2 more ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems... CVE-2008-4247 Public exploitFix available 7.5 HighSeptember 25, 2008
• netbsd NetBSD 3.0, 3.1, and 4.0, when a pppoe instance exists, does not properly check the length of a... CVE-2008-3584 9.3 HighSeptember 11, 2008
• freebsd, kame, netbsd +2 more The mld_input function in sys/netinet6/mld6.c in the kernel in NetBSD 4.0, FreeBSD, and KAME,... CVE-2008-2464 7.1 HighSeptember 10, 2008
• freebsd, netbsd +1 more Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and... CVE-2008-1391 Public exploitFix available EPSS 18.8% 7.5 HighMarch 27, 2008
• Show olderLoading…