CVE-2018-6918

In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, causing an infinite loop when the length is zero. This issue can allow a remote attacker who is able ...

CVE-2017-1087

CVE-2017-1087 affects FreeBSD 10.x where named POSIX shared memory objects are globally scoped across jails and host. According to sources, a process in one jail can read/modify shared memory created by another jail or host, enabling malicious content injection into memory regions trusted by appl...