FreeBSD -- Uninitialized kernel memory disclosure via ktrace(2)

Problem Description: In some cases, the ktrace facility will log the contents of kernel structures to userspace. In one such case, ktrace dumps a variable-sized sockaddr to userspace. There, the full sockaddr is copied, even when it is shorter than the full size. This can result in up to 14...

FreeBSD-SA-25:04.ktrace

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:04.ktrace Security Advisory The FreeBSD Project Topic: Uninitialized kernel memory disclosure via ktrace2 Category: core Module: ktrace Announced: 2025-01-29...

FreeBSD-SA-25:03.etcupdate

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:03.etcupdate Security Advisory The FreeBSD Project Topic: Unprivileged access to system files Category: core Module: etcupdate Announced: 2025-01-29 Credits:...

PT-2025-3858 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The implementation of VOP VPTOFH in the cd9660, tarfs, and ext2fs filesystems overflows the destination FID buffer by 4 bytes, causing a stack buffer overflow. A NFS server that exports one...

FreeBSD-SA-25:01.openssh

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:01.openssh Security Advisory The FreeBSD Project Topic: OpenSSH Keystroke Obfuscation Bypass Category: contrib Module: openssh Announced: 2025-01-29 Credits:...

FreeBSD-SA-25:02.fs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:02.fs Security Advisory The FreeBSD Project Topic: Buffer overflow in some filesystems via NFS Category: core Module: fs Announced: 2025-01-29 Credits: Kevin...

FreeBSD -- Buffer overflow in some filesystems via NFS

Problem Description: In order to export a file system via NFS, the file system must define a file system identifier FID for all exported files. Each FreeBSD file system implements operations to translate between FIDs and vnodes, the kernel's in-memory representation of files. These operations are...

FreeBSD : chromium -- multiple security fixes (c53cd328-8131-4fc2-a083-a9e9d45e3028)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c53cd328-8131-4fc2-a083-a9e9d45e3028 advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

FreeBSD : electron32 -- multiple vulnerabilities (ef303b6a-7d9e-4e28-b92e-21f39d519d9e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ef303b6a-7d9e-4e28-b92e-21f39d519d9e advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : chromium -- multiple security fixes (756839e1-cd78-4082-9f9e-d0da616ca8dd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 756839e1-cd78-4082-9f9e-d0da616ca8dd advisory. Chrome Releases reports: This update includes 16 security fixes: Tenable has extracted the...

FreeBSD : Vaultwarden -- Multiple vulnerabilities (41711c0d-db27-11ef-873e-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 41711c0d-db27-11ef-873e-8447094a420f advisory. The Vaultwarden project reports: RCE in the admin panel. Getting access to the Admin Panel via...

FreeBSD : Gitlab -- Vulnerabilities (24c93a28-d95b-11ef-b6b2-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 24c93a28-d95b-11ef-b6b2-2cf05da270f3 advisory. Gitlab reports: Stored XSS via Asciidoctor render Developer could exfiltrate protected CI/CD...

FreeBSD : electron33 -- multiple vulnerabilities (2def27c7-7dd0-42cb-adf6-8e5a7afe4db3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2def27c7-7dd0-42cb-adf6-8e5a7afe4db3 advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : clamav -- Possbile denial-of-service vulnerability (1e109b60-d92e-11ef-a661-08002784c58d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1e109b60-d92e-11ef-a661-08002784c58d advisory. The ClamAV project reports: A possible buffer overflow read bug is found in the OLE2 file parser that...

FreeBSD : go -- multiple vulnerabilities (704aa72a-d840-11ef-a205-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 704aa72a-d840-11ef-a205-901b0e9408dc advisory. The Go project reports: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints A...

FreeBSD : electron32 -- Type Confusion in V8 (7d17676d-4828-4a43-85d6-1ee14362de6e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7d17676d-4828-4a43-85d6-1ee14362de6e advisory. Electron developers report: This update fixes the following vulnerability: Tenable has extracted the...

FreeBSD : electron31 -- multiple vulnerabilities (3161429b-3897-4593-84a0-b41ffbbfa36b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3161429b-3897-4593-84a0-b41ffbbfa36b advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : age -- age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution (d9b0fea0-d564-11ef-b9bc-d05099c0ae8c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d9b0fea0-d564-11ef-b9bc-d05099c0ae8c advisory. Filippo Valsorda reports: A plugin name containing a path separator may allow an attacker to execute an...

FreeBSD : openvpn -- too long a username or password from a client can confuse openvpn servers (47bc292a-d472-11ef-aaab-7d43732cb6f5)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 47bc292a-d472-11ef-aaab-7d43732cb6f5 advisory. Frank Lichtenheld reports: OpenVPN v2.6.13 ... improve server-side handling of clients sending username...

FreeBSD : rsync -- Multiple security fixes (163edccf-d2ba-11ef-b10e-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 163edccf-d2ba-11ef-b10e-589cfc10a551 advisory. rsync reports: This update includes multiple security fixes: Tenable has extracted the precedi...