Skip to contentOpenbsd vulnerabilities
Newest
- openbsd opensshThe OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a...CVE-2014-92784.0 Medium
- openbsd opensmtpdOpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to...CVE-2013-2125Fix available5.0 Medium
- openbsd opensshThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...CVE-2014-2653Fix available5.8 Medium
- openbsd openssh, oracle communications user data repository +1 moresshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...CVE-2014-2532Fix available4.9 Medium
- openbsd opensshssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand...CVE-2011-43272.1 Low
- openbsd opensshThe hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to...CVE-2014-16927.5 High
- openbsd opensshThe mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES...CVE-2013-4548Fix available6.0 Medium
- openbsd opensshThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...CVE-2010-5107Fix availableEPSS 16.9%5.0 Medium
- openbsd opensshThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...CVE-2011-5000Fix available3.5 Low
- openbsd opensshThe auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug...CVE-2012-0814Fix available3.5 Low
- freebsd, freetype, netbsd +2 more +4 moreThe LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org...CVE-2011-2895Fix available9.3 High
- openbsdMultiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow...CVE-2011-21685.0 Medium
- apache http server, portable runtime, apple mac os x +7 more +9 moreStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...CVE-2011-0419Public exploitFix availableEPSS 30.4%4.3 Medium
- linux kernel, openbsd +1 moreInteger signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the...CVE-2011-10137.2 High
- freebsd, netbsd, openbsd +1 more +3 moreThe (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH...CVE-2010-47554.0 Medium
- apple mac os x, freebsd, netbsd +1 more +3 moreThe glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and...CVE-2010-47544.0 Medium
- openbsd opensshThe key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy...CVE-2011-0539Fix available5.0 Medium
- openbsd opensshOpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters...CVE-2010-44787.5 High
- openbsdOpenBSD 4.4, 4.5, and 4.6, when running on an i386 kernel, does not properly handle XMM...CVE-2009-35724.9 Medium
- openbsd opensshA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...CVE-2009-2904Fix available6.9 Medium
- midnightbsd, mirbsd miros, netbsd +1 more +3 moreThe pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5,...CVE-2009-0687Public exploit7.8 High
- freebsd, k-meleon project k-meleon, mozilla firefox +3 more +5 moreArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...CVE-2009-0689Public exploitFix availableEPSS 29.4%6.8 Medium
- microsoft interix, openbsd +1 moreInteger overflow in the fts_build function in fts.c in libc in (1) OpenBSD 4.4 and earlier and (2...CVE-2009-0537Public exploit4.9 Medium
- openbsdThe aspath_prepend function in rde_attr.c in bgpd in OpenBSD 4.3 and 4.4 allows remote attackers...CVE-2009-07805.0 Medium
- openbsd openssh, ssh tectia client, tectia connector +2 more +4 moreError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...CVE-2008-5161Public exploitFix availableEPSS 18.6%2.6 Low
- bsd, bsdi bsd os, cisco catalyst blade switch 3020 firmware +16 more +18 moreThe TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4)...CVE-2008-4609Public exploitFix availableEPSS 32.4%7.1 High
- force10 ftos, freebsd, netbsd +3 more +5 moreThe IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2)...CVE-2008-24769.3 High
- freebsd, netbsd, openbsd +2 moreftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems...CVE-2008-4247Public exploitFix available7.5 High
- openbsd opensshA certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny;...CVE-2008-4109Public exploitFix availableEPSS 28.6%5.0 Medium
- openbsd opensshCertain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008...CVE-2008-38449.3 High
- openbsd opensshOpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration...CVE-2008-32591.2 Low
- openbsd opensshsshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote...CVE-2008-3234Public exploit6.5 Medium
- openbsd opensshOpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config...CVE-2008-1657Fix available6.5 Medium
- openbsd opensshOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...CVE-2008-1483Fix available6.9 Medium
- freebsd, netbsd, openbsd +2 moreStack-based buffer overflow in the command_Expand_Interpret function in command.c in ppp (aka...CVE-2008-1215Public exploit4.6 Medium
- openbsdThe tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a...CVE-2008-10587.8 High
- openbsdThe ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a...CVE-2008-10577.8 High
- openbsdCross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD...CVE-2007-6700Public exploit4.3 Medium
- openbsdOpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the...CVE-2008-0384Public exploit4.9 Medium
- openbsd opensshUnspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on...CVE-2007-31024.3 Medium
- openbsd, debian linux, redhat enterprise linux +3 more +5 moreStack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0...CVE-2007-5365Public exploitFix availableEPSS 80.3%7.2 High
- openbsd opensshssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and...CVE-2007-4752Fix available7.5 High
- cisco webns, openbsd openssh, teamf1 sshield +2 moreUnspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco...CVE-2007-46545.0 Medium
- openbsd openssh, netapp hci management node, hci storage node +2 more +4 moreOpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to...CVE-2007-2768Fix available4.3 Medium
- openbsd opensshOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers...CVE-2007-22435.0 Medium
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 moreInteger overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows...CVE-2007-1352Fix available3.8 Low
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...CVE-2007-1351Fix available8.5 High
- openbsdBuffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute...CVE-2007-1365Public exploitEPSS 21.2%10.0 High
- openbsdOpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and...CVE-2007-03435.0 Medium
- openbsdUnspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in...CVE-2007-0085Public exploit6.0 Medium
- Show moreLoading…