Skip to contentOpenbsd vulnerabilities
Newest
- netbsd, openbsd +1 moreOpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev...CVE-2006-67306.6 Medium
- freebsd, netbsd, openbsd +2 more** DISPUTED ** Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow...CVE-2006-6397Disputed4.4 Medium
- openbsdThe _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly...CVE-2006-61647.2 High
- openbsd opensshUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...CVE-2006-5794Fix available7.5 High
- freebsd, openbsd +1 moreThe kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via...CVE-2006-5550Public exploit4.9 Medium
- openbsd opensshOpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under...CVE-2006-5229Public exploitEPSS 58.9%2.6 Low
- netbsd, openbsd +1 moreInteger overflow in the systrace_preprepl function (STRIOCREPLACE) in systrace in OpenBSD 3.9 and...CVE-2006-52184.6 Medium
- openbsd opensshpacket.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by...CVE-2006-4925Fix availableEPSS 15.0%5.0 Medium
- openbsd opensshUnspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...CVE-2006-5052Fix available5.0 Medium
- openbsd openssh, apple mac os x, mac os x server +1 more +3 moreSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...CVE-2006-5051Public exploitFix availableEPSS 45.6%8.1 High
- openbsd opensshsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...CVE-2006-4924Public exploitFix availableEPSS 38.1%7.8 High
- openbsdisakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA)...CVE-2006-4436Fix available5.0 Medium
- openbsdOpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a...CVE-2006-44354.9 Medium
- freebsd, netbsd, openbsd +2 moreBuffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta...CVE-2006-4304EPSS 11.9%10.0 High
- freebsd, openbsd openssh +1 moreOpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked...CVE-2006-0883Fix available5.0 Medium
- openbsd opensshscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain...CVE-2006-0225Fix available4.6 Medium
- openbsdThe dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re...CVE-2006-00984.6 Medium
- dragonfly, freebsd, openbsd +1 more +3 moreThe securelevels implementation in FreeBSD 7.0 and earlier, OpenBSD up to 3.8, DragonFly up to 1...CVE-2005-43514.3 Medium
- openbsd opensshsshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...CVE-2005-2798Fix available5.0 Medium
- openbsd opensshOpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D...CVE-2005-2797Fix available5.0 Medium
- openbsd opensshSSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames,...CVE-2005-2666Fix available1.2 Low
- alaxala networks, cisco agent desktop, aironet ap1200 +73 more +75 moreMultiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the...CVE-2005-0356Public exploitEPSS 82.8%5.0 Medium
- openbsdMultiple vulnerabilities in the SACK functionality in (1) tcp_input.c and (2) tcp_usrreq.c...CVE-2005-09605.0 Medium
- openbsdThe copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD...CVE-2005-06375.0 Medium
- openbsdThe TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of...CVE-2005-07405.0 Medium
- openbsd opensshsshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection...CVE-2004-2760Fix available6.8 Medium
- openbsdOpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian...CVE-2004-23387.5 High
- openbsdHeap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a...CVE-2004-22302.1 Low
- openbsdlogin_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret...CVE-2004-21637.5 High
- openbsd opensshsshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege...CVE-2004-2069Fix available5.0 Medium
- openbsdPF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a...CVE-2004-17997.5 High
- cvs, freebsd, gentoo linux +3 more +5 moreFormat string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16...CVE-2004-1471Public exploitFix available7.1 High
- openbsd, suse linux, x.org x11r6 +2 moreMultiple integer overflows in (1) the xpmParseColors function in parse.c, (2)...CVE-2004-06887.5 High
- openbsd, suse linux, x.org x11r6 +2 moreMultiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in...CVE-2004-06877.5 High
- netbsd, openbsd +1 moreOpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash)...CVE-2004-02575.0 Medium
- openbsd opensshThe default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote...CVE-2004-1653EPSS 11.3%6.4 Medium
- openbsdThe bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging...CVE-2004-08195.0 Medium
- apache http server, hp virtualvault, vvos +3 more +5 moreHeap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote...CVE-2004-0492Fix availableEPSS 33.6%10.0 High
- cvs, gentoo linux, openbsd +2 more +4 moreserve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle...CVE-2004-0418Fix available10.0 High
- cvs, gentoo linux, openbsd +2 more +4 moreInteger overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x...CVE-2004-0417Fix available5.0 Medium
- cvs, gentoo linux, openbsd +2 more +4 moreDouble free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x...CVE-2004-0416Public exploitFix availableEPSS 13.2%10.0 High
- cvs, gentoo linux, openbsd +2 more +4 moreCVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry"...CVE-2004-0414Fix available10.0 High
- openbsd opensshDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...CVE-2004-0175Fix available4.3 Medium
- openbsdMultiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4)...CVE-2004-04824.6 Medium
- openbsdMultiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a...CVE-2004-02225.0 Medium
- openbsdisakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash)...CVE-2004-02215.0 Medium
- openbsdisakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an...CVE-2004-022010.0 High
- openbsdisakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash)...CVE-2004-02195.0 Medium
- openbsdisakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite...CVE-2004-02185.0 Medium
- openssl, 4d webstar, apple mac os x +61 more +63 moreThe SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos...CVE-2004-0112Fix availableEPSS 10.4%5.0 Medium
- Show moreLoading…