freebsd Vulnerability Advisory Catalog

Total 415 security vulnerabilities recorded for freebsd software and firmware.

← Back to All Vendors
CVE-2020-7459 MEDIUM
Component: freebsd

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missin...

📅 2020-08-06
CVSS 6.8 Dossier →
CVE-2020-7458 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment var...

📅 2020-07-09
CVSS 9.8 Dossier →
Component: freebsd

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missin...

📅 2020-07-09
CVSS 8.1 Dossier →
CVE-2020-7456 MEDIUM
Component: freebsd

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid...

📅 2020-06-09
CVSS 6.8 Dossier →
CVE-2020-7455 MEDIUM
Component: freebsd

In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP pa...

📅 2020-05-13
CVSS 5.5 Dossier →
CVE-2020-7454 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r360971, 12.1-RELEASE before p5, 11.4-STABLE before r360971, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, libalias d...

📅 2020-05-13
CVSS 9.8 Dossier →
CVE-2019-15880 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r356911, and 12.1-RELEASE before p5, insufficient checking in the cryptodev module allocated the size of a kernel buffer...

📅 2020-05-13
CVSS 9.8 Dossier →
Component: freebsd

In FreeBSD 12.1-STABLE before r356908, 12.1-RELEASE before p5, 11.3-STABLE before r356908, and 11.3-RELEASE before p9, a race condition in the cryptod...

📅 2020-05-13
CVSS 7.4 Dossier →
Component: freebsd

In FreeBSD 12.1-STABLE before r352509, 11.3-STABLE before r352509, and 11.3-RELEASE before p9, an unprivileged local user can trigger a use-after-free...

📅 2020-05-13
CVSS 7.8 Dossier →
CVE-2020-7453 MEDIUM
Component: freebsd

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a mis...

📅 2020-04-29
CVSS 6.0 Dossier →
CVE-2020-7452 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE before 11.3-RELEASE-p7, incor...

📅 2020-04-29
CVSS 9.1 Dossier →
CVE-2019-5614 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incom...

📅 2020-04-29
CVSS 9.8 Dossier →
CVE-2019-15874 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before r356036, and 11.3-RELEASE before 11.3-RELEASE-p8, incom...

📅 2020-04-29
CVSS 9.8 Dossier →
CVE-2020-7451 MEDIUM
Component: freebsd

In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP...

📅 2020-04-28
CVSS 5.3 Dossier →
Component: freebsd

In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed...

📅 2020-04-28
CVSS 5.5 Dossier →
Component: freebsd

In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, drive...

📅 2020-04-28
CVSS 5.5 Dossier →
Component: freebsd

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buf...

📅 2020-03-14
CVSS 7.8 Dossier →
Component: freebsd

grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or ...

📅 2020-03-14
CVSS 7.8 Dossier →
Component: freebsd

The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flo...

📅 2020-02-20
CVSS 7.5 Dossier →
Component: freebsd

The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flo...

📅 2020-02-20
CVSS 7.5 Dossier →
CVE-2015-2923 MEDIUM
Component: freebsd

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to reconfigure a hop-limit setti...

📅 2020-02-20
CVSS 6.5 Dossier →
CVE-2014-3879 CRITICAL
Component: freebsd

OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a policy that does not exist, whic...

📅 2020-02-18
CVSS 9.8 Dossier →
CVE-2020-7450 CRITICAL
Component: freebsd

In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3...

📅 2020-02-18
CVSS 9.8 Dossier →
CVE-2019-5613 CRITICAL
Component: freebsd

In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by t...

📅 2020-02-18
CVSS 9.8 Dossier →
Page 5 of 18 (415 Total Records)