FreeBSD 11.x < 11.2-RELEASE-p13 / 11.x < 11.3-RELEASE-p2 / 12.x < 12.0-RELEASE-p9 MLDv2 Out-of-Bounds Memory Access DoS

The version of the FreeBSD kernel running on the remote host is 11.x prior to 11.2-RELEASE-p13, 11.x prior to 11.3-RELEASE-p2, or 12.x prior to 12.0-RELEASE-p9. It is, therefore, affected by an out-of-bounds memory access denial-of-service vulnerability in MLDv2. An unauthenticated attacker could...

CVE-2019-5604

In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...

Design/Logic Flaw

In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and 11.2-RELEASE before 11.2-RELEASE-p11, a bug in iconv implementation may allow an attacker to write past the end of an output buffer. Depending on the...

CVE-2019-5598

CVE-2019-5598 concerns FreeBSD pf where a bug allows an ICMP/ICMP6 outer packet to bypass packet-filter rules because pf does not verify whether the outer packet destination equals the inner packet source. The description lists affected FreeBSD lines (11.3-PRERELEASE before r345378, 12.0-STABLE b...

Stack overflow

In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow...

CVE-2017-1084

In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow...

CVE-2017-1083

CVE-2017-1083 affects FreeBSD before 11.2-RELEASE, where a stack guard-page is available but disabled by default. The described vulnerability allows a poorly written process to trigger a stack overflow, potentially causing instability. The connected documents confirm the affected version range an...

CVE-2017-1084

Removed by vendor...

CVE-2017-1085

CVE-2017-1085 affects FreeBSD prior to 11.2-RELEASE: when an application calls setrlimit() to raise RLIMIT_STACK, a read-only memory region below the stack can be turned into read-write, enabling a specially crafted executable to execute arbitrary code in the user context. A PoC exists (Exploit-D...