FreeBSD : electron25 -- multiple vulnerabilities (e07a7754-12a4-4661-b852-fd221d68955f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e07a7754-12a4-4661-b852-fd221d68955f advisory. - Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

FreeBSD : FreeBSD -- TCP spoofing vulnerability in pf(4) (9cbbc506-93c1-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9cbbc506-93c1-11ee-8e38-002590c1f29c advisory. - As part of its stateful TCP connection tracking implementation, pf performs sequence number validatio...

PT-2023-7977 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.4-RELEASE through 12.4-RELEASE-p8 FreeBSD versions 13.2-RELEASE through 13.2-RELEASE-p6 FreeBSD versions 14.0-RELEASE through 14.0-RELEASE-p1 Description: The pf4 packet filter in FreeBSD incorrectly validates TCP sequence...

FreeBSD -- TCP spoofing vulnerability in pf(4)

Problem Description: As part of its stateful TCP connection tracking implementation, pf performs sequence number validation on inbound packets. This makes it difficult for a would-be attacker to spoof the sender and inject packets into a TCP stream, since crafted packets must contain sequence...

FreeBSD-SA-23:17.pf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-23:17.pf Security Advisory The FreeBSD Project Topic: TCP spoofing vulnerability in pf4 Category: core Module: pf Announced: 2023-12-05 Credits: Yuxiang Yang, A...

FreeBSD : varnish -- HTTP/2 Rapid Reset Attack (f25a34b1-910d-11ee-a1a2-641c67a117d8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f25a34b1-910d-11ee-a1a2-641c67a117d8 advisory. - The HTTP/2 protocol allows a denial of service server resource consumption because request cancellati...

FreeBSD : Gitlab -- Vulnerabilities (3b14b2b4-9014-11ee-98b3-001b217b3468)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3b14b2b4-9014-11ee-98b3-001b217b3468 advisory. - An issue has been discovered in GitLab EE affecting all versions starting from X.Y before...

FreeBSD : electron25 -- multiple vulnerabilities (302fc846-860f-482e-a8f6-ee9f254dfacf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 302fc846-860f-482e-a8f6-ee9f254dfacf advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

FreeBSD : electron26 -- multiple vulnerabilities (7e1a508f-7167-47b0-b9fc-95f541933a86)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7e1a508f-7167-47b0-b9fc-95f541933a86 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

FreeBSD : chromium -- multiple security fixes (8cdd38c7-8ebb-11ee-86bb-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8cdd38c7-8ebb-11ee-86bb-a8a1599412c6 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker...

FreeBSD : MariaDB -- Denial-of-Service vulnerability (388e6557-8c80-11ee-9ee3-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 388e6557-8c80-11ee-9ee3-84a93843eb75 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that...

FreeBSD : strongSwan -- vulnerability in charon-tkm (a62c0c50-8aa0-11ee-ac0d-00e0670f2660)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a62c0c50-8aa0-11ee-ac0d-00e0670f2660 advisory. - strongSwan reports: A vulnerability in charon-tkm related to processing DH public values was discover...

FreeBSD : electron{25,26} -- use after free in Garbage Collection (147353a3-c33b-46d1-b751-e72c0d7f29df)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 147353a3-c33b-46d1-b751-e72c0d7f29df advisory. - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attack...

The vulnerability of the __flush() function in the libc library of the FreeBSD operating system allows a hacker to execute arbitrary code.

The vulnerability of the flush function in the libc library of the FreeBSD operating system is related to writing data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the cap_net service in the FreeBSD operating system allows a hacker to modify the list of allowed domain names.

The vulnerability of the capnet service in the FreeBSD operating system is related to errors in privilege management. Exploiting this vulnerability could allow a malicious actor to modify the list of allowed domain names...

FreeBSD : electron{25,26} -- use after free in WebAudio (a30f1a12-117f-4dac-a1d0-d65eaf084953)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a30f1a12-117f-4dac-a1d0-d65eaf084953 advisory. - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...

FreeBSD : chromium -- multiple security fixes (0da4db89-84bf-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 0da4db89-84bf-11ee-8290-a8a1599412c6 advisory. - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remo...

FreeBSD : typo3 -- Multiple vulnerabilities (7cc003cb-83b9-11ee-957d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7cc003cb-83b9-11ee-957d-b42e991fc52e advisory. - TYPO3 is an open source PHP based web content management system released under the GNU GPL. ...

FreeBSD : openvpn -- 2.6.0...2.6.6 --fragment option division by zero crash, and TLS data leak (2fe004f5-83fd-11ee-9f5d-31909fb2f495)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 2fe004f5-83fd-11ee-9f5d-31909fb2f495 advisory. - Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6...

The vulnerability of the status_logs_filter_dynamic.php component of the software network interface card based on the FreeBSD Netgate pfSense operating system allows a intruder to enhance their privileges.

The vulnerability of the statuslogsfilterdynamic.php component of the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a...