Skip to contentOpenbsd vulnerabilities
Newest
- openssl, 4d webstar, apple mac os x +62 more +64 moreOpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote...CVE-2004-0081Fix available5.0 Medium
- openssl, 4d webstar, apple mac os x +62 more +64 moreThe do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows...CVE-2004-0079Fix available7.5 High
- freebsd, openbsd +1 moreFreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of...CVE-2004-01715.0 Medium
- freebsd, netbsd, openbsd +2 moreThe shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD...CVE-2004-0114Public exploit4.6 Medium
- openbsd, xfree86 project x11r6 +1 moreMultiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font...CVE-2004-01067.2 High
- openbsd, xfree86 project x11r6 +1 moreBuffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the...CVE-2004-0084Public exploitEPSS 24.9%10.0 High
- openbsd, xfree86 project x11r6 +1 moreBuffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users...CVE-2004-0083Public exploitEPSS 21.2%10.0 High
- apache http server, apple apache mod digest apple, avaya communication manager +10 more +12 moremod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the...CVE-2004-10827.5 High
- openbsd opensshsshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard...CVE-2003-1562Fix available7.6 High
- openbsdchpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a...CVE-2003-1366Public exploit3.3 Low
- openbsdOpenBSD kernel 3.3 and 3.4 allows local users to cause a denial of service (kernel panic) and...CVE-2003-0955Public exploit4.6 Medium
- apple mac os x, freebsd, apple mac os x server +1 more +3 moreThe arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD...CVE-2003-08045.0 Medium
- openbsd opensshThe PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as...CVE-2003-0787Fix available7.5 High
- openbsd opensshThe SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege...CVE-2003-0786Fix available10.0 High
- sendmail, apple mac os x, mac os x server +11 more +13 moreA "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard...CVE-2003-0681Public exploitFix availableEPSS 22.4%7.5 High
- openbsd opensshMultiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial...CVE-2003-0695Fix available7.5 High
- openbsd opensshA "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow...CVE-2003-0693Fix availableEPSS 11.4%10.0 High
- openbsd openssh"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of...CVE-2003-0682Fix available7.5 High
- redhat sendmail, compaq tru64, freebsd +2 more +4 moreThe DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not...CVE-2003-0688Fix available5.0 Medium
- wuftpd wu-ftpd, apple mac os x, mac os x server +5 more +7 moreOff-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may...CVE-2003-0466Public exploitFix availableEPSS 78.1%9.8 Critical
- openbsd opensshOpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...CVE-2003-0386Fix available7.5 High
- openbsd openssh, openpkg, siemens scalance x204rna ecc firmware +1 more +3 moreOpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an...CVE-2003-0190Public exploitFix availableEPSS 76.8%5.0 Medium
- openbsdInteger signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite...CVE-2002-14207.2 High
- gnu glibc, cray unicos, freebsd +10 more +12 moreInteger overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR ...CVE-2003-0028Fix availableEPSS 15.0%7.5 High
- bsd lpr, lprold, openbsd +1 more +3 moreBuffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3...CVE-2003-0144Public exploitFix available7.2 High
- openssl, freebsd, openbsd +2 moressl3_get_record in s3_pkt.c for OpenSSL before 0.9.7a and 0.9.6 before 0.9.6i does not perform a...CVE-2003-0078Public exploitFix availableEPSS 13.7%5.0 Medium
- openbsdsyslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when...CVE-2002-22802.1 Low
- openbsd, freebsd ports collection +1 moreisakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows...CVE-2002-22225.1 Medium
- openbsdOpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to...CVE-2002-21884.9 Medium
- openbsdThe setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments...CVE-2002-21806.8 Medium
- freebsd, netbsd, openbsd +2 moreRace condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and...CVE-2002-20923.7 Low
- freebsd, netbsd, openbsd +2 moretip on multiple BSD-based operating systems allows local users to cause a denial of service ...CVE-2002-19155.5 Medium
- ncftp software ncftp, openbsd, sun solaris +1 more +3 moreDirectory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote...CVE-2002-13455.0 Medium
- isc bind, freebsd, openbsd +2 moreBIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR...CVE-2002-12215.0 Medium
- isc bind, freebsd, openbsd +2 moreBIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to...CVE-2002-1220Public exploit5.0 Medium
- isc bind, freebsd, openbsd +2 moreBuffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier,...CVE-2002-1219EPSS 12.3%7.5 High
- openbsdOpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and...CVE-2002-07667.2 High
- openbsd openssh, openbsd +1 moresshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users...CVE-2002-0765Fix available7.5 High
- freebsd, netbsd, openbsd +2 moreKAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems,...CVE-2002-04147.5 High
- freebsd, microsoft windows 2000, windows nt +4 more +6 moreInteger overflow in xdr_array function in RPC servers for operating systems that use libc, glibc,...CVE-2002-0391Fix availableEPSS 58.1%9.8 Critical
- immunix, netbsd, openbsd +1 more +3 moreFormat string vulnerability in startprinting() function of printjob.c in BSD-based lpr lpd...CVE-2000-12087.2 High
- freebsd, openbsd +1 morektrace in BSD-based operating systems allows the owner of a process with special privileges to...CVE-2002-07012.1 Low
- openbsd opensshBuffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute...CVE-2002-0640Public exploitFix availableEPSS 28.2%10.0 High
- openbsd opensshInteger overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute...CVE-2002-0639Fix availableEPSS 18.3%9.8 Critical
- openbsdmail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is...CVE-2002-0542Public exploit7.2 High
- freebsd, netbsd, openbsd +2 moreThe TCP implementation in various BSD operating systems (tcp_input.c) does not properly block...CVE-2002-03815.0 Medium
- openbsd opensshBuffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and...CVE-2002-0575Public exploit7.5 High
- freebsd, openbsd, sun solaris +1 more +3 moreFreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to...CVE-2002-0572Public exploit7.2 High
- openbsdVulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1)...CVE-2002-05577.5 High
- openbsdPF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows...CVE-2002-05145.0 Medium
- Show moreLoading…