Skip to contentOpenbsd vulnerabilities
Newest
- openbsdOpenBSD httpd(8) null dereferenceCVE-2024-111488.7 High
- openbsdOpenBSD NFS double-free vulnerabilityCVE-2024-109349.2 Critical
- openbsd, vixie cron +1 morecron/entry.c in vixie cron before 9cc8ab1, as used in OpenBSD 7.4 and 7.5, allows a heap-based...CVE-2024-436887.3 High
- openbsd opensshOpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password...CVE-2024-39894Fix available7.5 High
- openbsd openssh, almalinux, amazon linux +71 more +73 moreOpenssh: regresshion - race condition in ssh allows rce/dosCVE-2024-6387Public exploitFix availableEPSS 99.5%8.1 High
- linux kernel, openbsd +1 moreOpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityCVE-2021-350003.3 Low
- linux kernel, openbsd +1 moreOpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure VulnerabilityCVE-2021-349993.8 Low
- freebsd, openbsd +1 moreNFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE,...CVE-2024-299379.8 Critical
- openbsdOpenBSD 7.4 and 7.3 m_split() network buffer kernel crashCVE-2023-525587.5 High
- openbsdOpenBSD 7.3 invalid l2tp message npppd crashCVE-2023-525577.5 High
- openbsdOpenBSD 7.4 pf state race condition kernel crashCVE-2023-525566.2 Medium
- openbsd openssh, fedoraproject fedora, redhat enterprise linux +1 more +3 moreOpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for...CVE-2023-51767Fix availableDisputed7.0 High
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...CVE-2023-51385Public exploitFix availableEPSS 19.8%6.5 Medium
- openbsd openssh, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 moreIn ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied....CVE-2023-51384Fix available5.5 Medium
- 9bis kitty, apache sshd, sshj +68 more +70 morePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795Public exploitFix availableEPSS 93.5%5.9 Medium
- openbsdOpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal...CVE-2023-402165.5 Medium
- openbsd openssh, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...CVE-2023-38408Public exploitFix availableEPSS 79.7%9.8 Critical
- openbsd libressl, openbsd +1 moreA double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and...CVE-2023-35784Fix available9.8 Critical
- openbsd libressl, openbsd +1 morex509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows...CVE-2021-468809.8 Critical
- openbsd libressl, openbsd +1 moreAn issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2...CVE-2022-484375.3 Medium
- openbsd, opensmtpd +1 moreascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and...CVE-2023-29323Fix available7.8 High
- openbsd openssh, netapp brocade fabric operating system, hci bootstrap os +6 more +8 moressh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop...CVE-2023-28531Fix available9.8 Critical
- openbsdIn OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash...CVE-2023-275677.5 High
- openbsd openssh, fedoraproject fedora, netapp 500f firmware +6 more +8 moreOpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms...CVE-2023-25136Public exploitFix availableEPSS 89.8%6.5 Medium
- openbsdslaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant...CVE-2022-278827.5 High
- openbsdengine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21 has a buffer overflow triggerable by...CVE-2022-278817.5 High
- openbsd openssh, debian linux +1 more** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key...CVE-2021-36368Fix availableDisputed3.7 Low
- openbsd openssh, fedoraproject fedora, netapp active iq unified manager +14 more +16 moresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...CVE-2021-41617Public exploitFix available7.0 High
- openbsd libresslx509_constraints_parse_mailbox in lib/libcrypto/x509/x509_constraints.c in LibreSSL through 3.4.0...CVE-2021-415815.5 Medium
- openbsd openssh, netapp clustered data ontap, hci management node +2 more +4 moreOpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of...CVE-2016-20012Public exploitDisputed5.3 Medium
- openbsd libresslLibreSSL 2.9.1 through 3.2.1 has an out-of-bounds read in asn1_item_print_ctx (called from...CVE-2019-250497.1 High
- openbsd libresslLibreSSL 2.9.1 through 3.2.1 has a heap-based buffer over-read in do_print_ex (called from...CVE-2019-250487.1 High
- openbsdIt was found in FreeBSD 8.0, 6.3 and 4.9, and OpenBSD 4.6 that a null pointer dereference in ftpd...CVE-2010-48167.5 High
- openbsdAn issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3...CVE-2020-26142Fix available5.3 Medium
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...CVE-2021-28041Fix available7.1 High
- openbsdiked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has...CVE-2020-160889.8 Critical
- openbsd openssh, broadcom fabric operating system, netapp a700s firmware +9 more +11 morescp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...CVE-2020-15778Public exploitFix availableDisputedEPSS 13.7%7.4 High
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...CVE-2020-14145Fix available5.9 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server...CVE-2020-12062Fix availableDisputed7.5 High
- apple mac os x, macos, freebsd +2 more +4 moreregcomp in the BSD implementation of libc is vulnerable to denial of service due to stack...CVE-2011-3336Public exploit7.5 High
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 moresmtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,...CVE-2020-7247In KEVPublic exploitFix availableEPSS 99.0%9.8 Critical
- libressl, opensuse +1 moreMemory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause...CVE-2015-53337.5 High
- libressl, opensuse +1 moreOff-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to...CVE-2015-53349.8 Critical
- textproc/isearch package package, openbsd textproc\/isearch +1 moreThe isearch package (textproc/isearch) before 1.47.01nb1 uses the tempnam() function to create...CVE-2012-56637.5 High
- openbsdOpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in...CVE-2019-19726Public exploit7.8 High
- apple macos, freebsd, itop vpn +6 more +8 moreA vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a...CVE-2019-14899Fix available7.4 High
- openbsd, debian linux, dietlibc +2 morelib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.CVE-2012-1577Fix available9.8 Critical
- openbsdIn OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding...CVE-2019-195197.8 High
- openbsdxlock in OpenBSD 6.6 allows local users to gain the privileges of the auth group by providing a...CVE-2019-19520Public exploit7.8 High
- openbsdlibc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by...CVE-2019-195219.8 Critical
- Show moreLoading…