Advisories · Technology
FreeBSD.
Every CVE that names FreeBSD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Multiple vulnerabilities in bhyve device models
- FreeBSD
- Race condition
- CVSS 7.0 High
Multiple vulnerabilities in bhyve device models
- FreeBSD
- Race condition
- Memory corruption
- CVSS 7.0 High
Multiple vulnerabilities in bhyve device models
- FreeBSD
- Race condition
- CVSS 5.5 Medium
TOCTOU race between sound(4) buffer resizing and mmap
- FreeBSD
- Race condition
- CVSS 8.2 High
Remotely triggerable buffer overflow in tcp_rack
- FreeBSD
- Memory corruption
- CVSS 7.5 High
IPv6 UDP sendto(2) bypasses jail loopback restriction
- FreeBSD
- CWE-941
- CVSS 6.5 Medium
Remote DoS via receive-side kernel TLS
- FreeBSD
- Memory corruption
- CWE-193
- CVSS 9.8 CriticalCritical · CVSS 9+
Multiple jail filesystem root escapes
- FreeBSD
- CWE-273
- CWE-281
- CVSS 8.8 High
Multiple jail filesystem root escapes
- FreeBSD
- CWE-273
- CVSS 7.1 High
Multiple jail filesystem root escapes
- FreeBSD
- CWE-273
- CVSS 7.0 High
Memory safety bugs in kqueue copy-on-fork implementation
- FreeBSD
- Memory corruption
- Race condition
- CVSS 7.0 High
Memory safety bugs in kqueue copy-on-fork implementation
- FreeBSD
- Race condition
- Memory corruption
- CVSS 8.4 High
Heap out-of-bounds access in semop(2)
- FreeBSD
- Memory corruption
- CVSS 7.8 High
TOCTOU race in POSIX shared memory large page configuration
- FreeBSD
- Race condition
- CVSS 7.0 High
Kernel use-after-free via tty ioctls
- FreeBSD
- Race condition
- Memory corruption
- CVSS 7.8 High
ppp(8): missing length validation in mp_SetEnddisc()
- FreeBSD
- Memory corruption
- CWE-130
- CVSS 8.8 High
ppp(8): missing length validation in LcpDecodeConfig()
- FreeBSD
- Memory corruption
- CWE-130
- CVSS 8.8 High
ppp(8): incorrect length calculation in mp_Enddisc()
- FreeBSD
- Memory corruption
- CVSS 8.1 High
Unauthorized credential switching
- FreeBSD
- Authentication bypass
- CVSS 7.8 High
Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Use-after-free in unix SOCK_STREAM message handling
- FreeBSD
- Memory corruption
- CVSS 7.8 High
hwpmc fails to detach PMCs during exec credential transitions
- FreeBSD
- CWE-273
- CVSS 7.4 High
Race condition in ELF core dump segment counting
- FreeBSD
- Race condition
- Memory corruption
- CVSS 7.8 High
Heap out-of-bounds access in semctl(2)
- FreeBSD
- Memory corruption
- CVSS 8.1 High
ktrace(2) privilege incorrectly validated in jails
- FreeBSD
- CWE-273
- CVSS 7.5 High
Missing MAC validation in wg(4) packet decryption
- FreeBSD
- Weak cryptography or TLS
- CVSS 5.5 Medium
Kernel stack disclosure via timer_settime(2)
- FreeBSD
- Memory corruption
- CVSS 8.4 High
Use-after-free in kqueue copy-on-fork
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Stack based buffer overflow in iconv(3)
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Heap based buffer overflow in iconv(3)
- FreeBSD
- Memory corruption
- CVSS 5.5 Medium
Kernel stack disclosure in 32-bit compatibility support
- FreeBSD
- Memory corruption
- CVSS 5.5 Medium
Kernel stack disclosure in Linux compatibility layer
- FreeBSD
- Memory corruption
- CVSS 3.3 Low
Remote DOS via uninitialized memory access in KTLS receive
- FreeBSD
- Memory corruption
- CVSS 3.3 Low
Incorrect audit records for ptrace(2) syscall requests
- FreeBSD
- CWE-223
- CWE-224
- CVSS 8.4 High
posixshm: system calls can incorrectly free memory of largepage objects
- FreeBSD
- Broken access control
- CVSS 8.8 High
posixshm: largepage shared memory objects not explicitly wired
- FreeBSD
- CWE-826
- CVSS 8.4 High
Use-after-free in TCP RACK stack option handler
- FreeBSD
- Memory corruption
- CVSS 7.1 High
unlinkat(2) ignores AT_RESOLVE_BENEATH flag
- FreeBSD
- CWE-273
- CVSS 8.8 High
Buffer overflow in libalias RTSP handler
- FreeBSD
- Memory corruption
- CVSS 3.3 Low
Incorrect user validation in ZFS_IOC_SET_PROP ioctl
- FreeBSD
- Broken access control
- CVSS 7.8 High
Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
- FreeBSD
- Memory corruption
- CVSS 8.8 High
Local privilege escalation via execve(2) TOCTOU race
- FreeBSD
- Race condition
- CVSS 8.8 High
Jail reference count underflow
- FreeBSD
- CWE-911
- CVSS 8.8 High
Use-after-free in device pager page list
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Integer overflow in vt(4) CONS_HISTORY ioctl
- FreeBSD
- Memory corruption
- CVSS 7.8 High
ASLR bypass for setuid executables via procctl(2)
- FreeBSD
- CWE-179
- CVSS 7.1 High
Flaw in Linuxulator execution of setugid binaries
- FreeBSD
- Privilege escalation
- CVSS 7.8 High
Use-after-free bug in the IPV6_MSFILTER socket option handler
- FreeBSD
- Memory corruption
- CVSS 6.5 Medium
sigqueue(2) missing capability mode restriction
- FreeBSD
- Privilege escalation
- CVSS 7.8 High
Multiple vulnerabilities in the sound(4) mmap path
- FreeBSD
- Memory corruption
- CWE-681
- CVSS 7.0 High
Multiple vulnerabilities in the sound(4) mmap path
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Arbitrary file overwrite via the KTLS receive path
- FreeBSD
- CWE-123
- CVSS 5.5 Medium
Missing permission check in thr_kill2(2)
- FreeBSD
- Privilege escalation
- CVSS 6.5 Medium
Incorrect libcap_net limitation list manipulation
- FreeBSD
- Privilege escalation
- CVSS 7.5 High
Remote code execution via installer Wi-Fi access point scans
- FreeBSD
- Command injection
- CVSS 8.8 High
select(2) file descriptor set overflow causes stack overflow
- FreeBSD
- Memory corruption
- CVSS 8.4 High
Missing validation in ptrace(PT_SC_REMOTE)
- FreeBSD
- Memory corruption
- CVSS 5.5 Medium
Heap overflow in FUSE_LISTXATTR
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Kernel use-after-free via file descriptor syscalls
- FreeBSD
- Memory corruption