CVE-2020-25582

Removed by vendor...

CVE-2020-25582

CVE-2020-25582 affects FreeBSD: on FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4, and 11.4-RELEASE before p8, a process entering a jail via jail_attach(2) can have the jailed root attach to it with ptrace(2) before the current working directory is changed....

CVE-2020-25581

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jailremove2 implementation, it may fail to kill some of the processes...

CVE-2020-25581

CVE-2020-25581 describes a race condition in jail_remove(2) in FreeBSD that may fail to terminate all processes inside a jail. Affected: FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4, and 11.4-RELEASE before p8. Impact: potential to leave jailed processes ...

CVE-2020-25581

Removed by vendor...

CVE-2020-25580

CVE-2020-25580 describes a regression in the FreeBSD login.access(5) rule processor across multiple FreeBSD releases (12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4, 11.4-RELEASE before p8). The regression causes login.access rules to fail to match when they should...

CVE-2020-25580

In FreeBSD 12.2-STABLE before r369346, 11.4-STABLE before r369345, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 a regression in the login.access5 rule processor has the effect of causing rules to fail to match even when they should not. This means that rules denying access may be ignored...

CVE-2020-7468

In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd8 bug in the implementation of the file system sandbox, combined with capabilities available to an authenticated FTP user, can be used to escape the...

CVE-2020-7468

CVE-2020-7468 affects FreeBSD ftpd (ftpd(8)) with ftpchroot; a bug in the filesystem sandbox, when combined with capabilities available to an authenticated FTP user, can escape ftpchroot restrictions and allow a malicious client to gain root privileges. Public sources describe the vulnerability i...

CVE-2020-7467

The CVE-2020-7467 issue is a FreeBSD bhyve SVM vulnerability. Affected: FreeBSD 12.2-STABLE before r365767; 12.1-RELEASE before p10; 11.4-STABLE before r365769; 11.4-RELEASE before p4; 11.3-RELEASE before p14. Description: several AMD virtualization instructions operate on host physical addresses...

CVE-2020-7467

In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these...

FreeBSD 注入漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from an injection vulnerability that can be exploited by an attacker to cause the driver to misinterpret portions of the payload of a large package as separate packages...

FreeBSD : gitea -- multiple vulnerabilities (c4d2f950-8c27-11eb-a3ae-0800278d94f0)

The Gitea Team reports for release 1.13.6 : - Fix bug on avatar middleware - Fix another clusterfuzz identified issue C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and...

FreeBSD : spamassassin -- Malicious rule configuration (.cf) files can be configured to run system commands (ec04f3d0-8cd9-11eb-bb9f-206a8a720317)

The Apache SpamAssassin project reports : Apache SpamAssassin 3.4.5 was recently released 1, and fixes an issue of security note where malicious rule configuration .cf files can be configured to run system commands. In Apache SpamAssassin before 3.4.5, exploits can be injected in a number of...

FreeBSD-SA-21:07.openssl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:07.openssl Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in OpenSSL Category: contrib Module: openssl Announced: 2021-03-25 Affects:...

FreeBSD : gitea -- quoting in markdown text (1431a25c-8a70-11eb-bd16-0800278d94f0)

The Gitea Team reports for release 1.13.5 : - Update to goldmark 1.3.3 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistribution and use in source VuX...

FreeBSD : Gitlab -- Multiple vulnerabilities (50e59056-87f2-11eb-b6a2-001b217b3468)

Gigtlab reports : Remote code execution via unsafe user-controlled markdown rendering options C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2021 Jacques Vidrine and contributors Redistributio...

FreeBSD : OpenSSH -- Double-free memory corruption in ssh-agent (76b5068c-8436-11eb-9469-080027f515ea)

OpenBSD Project reports : ssh-agent1: fixed a double-free memory corruption that was introduced in OpenSSH 8.2 . We treat all such memory faults as potentially exploitable. This bug could be reached by an attacker with access to the agent socket. On modern operating systems where the OS can provi...

FreeBSD : dnsmasq -- cache poisoning vulnerability in certain configurations (5b72b1ff-877c-11eb-bd4f-2f1d57dafe46)

Simon Kelley reports : In configurations where the forwarding server address contains an @ character for specifying a sending interface or source address, the random source port behavior was disabled, making cache poisoning attacks possible. This only affects configurations of the form...

FreeBSD : minio -- MITM attack (b073677f-253a-41f9-bf2b-2d16072a25f6)

minio developer report : This is a security issue because it enables MITM modification of request bodies that are meant to have integrity guaranteed by chunk signatures. In a PUT request using aws-chunked encoding, MinIO ordinarily verifies signatures at the end of a chunk. This check can be...