Advisories · Technology
FreeBSD.
Every CVE that names FreeBSD among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.8 High
Stack buffer overflow via setcred(2)
- FreeBSD
- Memory corruption
- CVSS 8.1 High
Heap overflow in libnv
- FreeBSD
- Memory corruption
- CWE-130
- CVSS 7.8 High
Stack overflow via select() file descriptor set overflow
- FreeBSD
- Memory corruption
- CVSS 8.1 High
Remotely triggerable out-of-bounds heap write in dhclient
- FreeBSD
- Memory corruption
- CVSS 7.5 High
pf can overflow the stack parsing crafted SCTP packets
- FreeBSD
- Denial of service
- CWE-791
- CVSS 7.8 High
Local privilege escalation via execve()
- FreeBSD
- CWE-783
- CVSS 8.1 High
Remote code execution via malicious DHCP options
- FreeBSD
- CWE-149
- CVSS 6.2 Medium
Missing large page handling in pmap_pkru_update_range()
- FreeBSD
- Privilege escalation
- Broken access control
- CVSS 8.4 High
Kernel use-after-free bug in the TIOCNOTTY handler
- FreeBSD
- Memory corruption
- CVSS 7.5 High
pf silently ignores certain rules
- FreeBSD
- CWE-480
- CWE-754
- CVSS 8.8 High
Remote code execution via RPCSEC_GSS packet validation
- FreeBSD
- Memory corruption
- CVSS 7.5 High
Remote denial of service via null pointer dereference
- FreeBSD
- Memory corruption
- CVSS 7.5 High
TCP: remotely exploitable DoS vector (mbuf leak)
- FreeBSD
- Denial of service
- CVSS 7.5 High
Local DoS and possible privilege escalation via routing sockets
- FreeBSD
- Memory corruption
- CVSS 7.5 High
blocklistd(8) socket leak
- FreeBSD
- Denial of service
- CVSS 7.5 High
Jail chroot escape via fd exchange with a different jail
- FreeBSD
- Privilege escalation
- CWE-488
- CVSS 8.8 High
Jail escape by a privileged user via nullfs
- FreeBSD
- Privilege escalation
- CVSS 7.5 High
ipfw denial of service
- FreeBSD
- Memory corruption
- CVSS 7.2 High
Remote code execution via ND6 Router Advertisements
- FreeBSD
- CWE-20
- CVSS 5.4 Medium
SO_REUSEPORT_LB breaks connect(2) for UDP sockets
- FreeBSD
- CWE-488
- CVSS 4.9 Medium
Uninitialized kernel memory disclosure via ktrace(2)
- FreeBSD
- Memory corruption
- CVSS 6.5 Medium
Unprivileged access to system files
- FreeBSD
- Broken access control
- CVSS 6.0 Medium
Buffer overflow in some filesystems via NFS
- FreeBSD
- Memory corruption
- CVSS 7.5 High
Unbounded allocation in ctl(4) CAM Target Layer
- FreeBSD
- CWE-665
- CVSS 5.3 Medium
Unbounded allocation in ctl(4) CAM Target Layer
- FreeBSD
- CWE-20
- CVSS 6.5 Medium
bhyve(8) NVMe driver to guest-induced infinite loops.
- FreeBSD
- CWE-1285
- CVSS 6.5 Medium
bhyve(8) hda driver buffer over-read
- FreeBSD
- Memory corruption
- CVSS 7.5 High
bhyve(8) infinite loop in the hda audio driver
- FreeBSD
- CWE-1285
- CVSS 6.5 Medium
bhyve(8) virtio_vq_recordon time-of-check to time-of-use race
- FreeBSD
- Race condition
- CVSS 6.5 Medium
bhyve(8) nvme_opc_get_log_page buffer over-read
- FreeBSD
- Memory corruption
- CVSS 8.1 High
bhyve(8) out-of-bounds read access via XHCI emulation
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
umtx Kernel panic or Use-After-Free
- FreeBSD
- Memory corruption
- CWE-911
- CVSS 8.2 High
bhyve(8) privileged guest escape via USB controller
- FreeBSD
- Memory corruption
- CWE-193
- CVSS 9.8 CriticalCritical · CVSS 9+
Multiple issues in ctl(4) CAM Target Layer
- FreeBSD
- Memory corruption
- CVSS 8.4 High
Multiple issues in ctl(4) CAM Target Layer
- FreeBSD
- Memory corruption
- CVSS 8.4 High
Multiple issues in ctl(4) CAM Target Layer
- FreeBSD
- CWE-790
- CWE-823
- CVSS 9.3 CriticalCritical · CVSS 9+
Multiple issues in ctl(4) CAM Target Layer
- FreeBSD
- Memory corruption
- CWE-909
- CVSS 8.4 High
bhyve(8) privileged guest escape via TPM device passthrough
- FreeBSD
- Memory corruption
- CWE-1285
- CVSS 8.4 High
Multiple vulnerabilities in libnv
- FreeBSD
- Memory corruption
- CWE-170
- CVSS 9.1 CriticalCritical · CVSS 9+
Multiple vulnerabilities in libnv
- FreeBSD
- Memory corruption
- CVSS 8.1 High
OpenSSH pre-authentication async signal safety issue
- FreeBSD
- CWE-364
- CVSS 5.3 Medium
NFS client accepts file names containing path separators
- FreeBSD
- Path traversal
- CVSS 7.5 High
ktrace(2) fails to detach when executing a setuid binary
- FreeBSD
- Broken access control
- CVSS 6.3 Medium
pf incorrectly matches different ICMPv6 states in the state table
- FreeBSD
- Broken access control
- CVSS 6.5 Medium
Stack overflow in ping(8)
- FreeBSD
- Memory corruption
- CVSS 8.8 High
Missing bounds check in 9p message handling
- FreeBSD
- Memory corruption
- CVSS 4.0 Medium
Memory disclosure by stale virtual memory mapping
- FreeBSD
- Denial of service
- CVSS 7.7 High
AIO credential reference count leak
- FreeBSD
- Memory corruption
- CVSS 4.7 Medium
Out of bound read in elf_note_prpsinfo()
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
802.11 heap buffer overflow
- FreeBSD
- Code injection
- CVSS 8.8 High
Bhyve e82545 device emulation out-of-bounds write
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
mpr/mps/mpt driver ioctl heap out-of-bounds write
- FreeBSD
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
Potential jail escape vulnerabilities in netmap
- FreeBSD
- Memory corruption
- CVSS 7.8 High
Potential jail escape vulnerabilities in netmap
- FreeBSD
- Race condition
- CVSS 3.3 Low
jail(2) information leak
- FreeBSD
- CVSS 6.3 Medium
bhyveload(8) host file access
- FreeBSD
- Information disclosure
-
NFS client data corruption and kernel memory disclosure
- FreeBSD
-
TCP spoofing vulnerability in pf(4)
- FreeBSD
-
Incorrect libcap_net limitation list manipulation
- FreeBSD
- Privilege escalation
-
libc stdio buffer overflow
- FreeBSD
- Memory corruption