16056 matches found
FreeBSD : tcpreplay -- Multiple vulnerabilities (045e46e8-abe6-11ea-99cb-10bf48e1088e)
fklassen on Github reports : This release fixes the following security issues : - memory access in dochecksum - NULL pointer dereference getlayer4v6 - NULL pointer dereference getipv6l4proto C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fro...
FreeBSD : libadplug -- Various vulnerabilities (329ecd60-aaf7-11ea-8659-10bf48e1088e)
Malvineous on Github reports : This release fixes the following security issues : - buffer overflow in .bmf - buffer overflow in .dtm - buffer overflow in .mkj - buffer overflow in .a2m - buffer overflow in .rad - buffer overflow in .mtk - double free and OOB reads in .u6m C Tenable Network...
FreeBSD : znc -- Authenticated users can trigger an application crash (10a24ce0-ab68-11ea-b9b8-641c67a117d8)
Mitre reports : ZNC 1.8.0 up to 1.8.1-rc1 allows attackers to trigger an application crash with a NULL pointer dereference if echo-message is not enabled and there is no network. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBS...
FreeBSD : NPM -- Multiple vulnerabilities (2a3588b4-ab12-11ea-a051-001b217b3468)
NPM reports : Global nodemodules Binary Overwrite Symlink reference outside of nodemodules Arbitrary File Write C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and...
FreeBSD Resource Management Error Vulnerability (CNVD-2020-35935)
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A resource management error vulnerability exists in FreeBSD. The vulnerability arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed vulnerabili...
AnyDesk Formatting String Error Vulnerability
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A format string error vulnerability exists in AnyDesk versions prior to 5.5.3 Linux and FreeBSD platforms. A remote attacker could exploit this vulnerability to execute code...
Anydesk -- Multiple Vulnerabilities
Anydesk reports: AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution...
FreeBSD : zeek -- Various vulnerabilities (9f7ae7ea-da93-4f86-b257-ba76707f6d5d)
Jon Siwek of Corelight reports : This release fixes the following security issues : - Fix potential stack overflow in NVT analyzer - Fix NVT analyzer memory leak from multiple telnet authn name options - Fix multiple content-transfer-encoding headers causing a memory leak - Fix potential leak of...
FreeBSD : FreeBSD -- USB HID descriptor parsing error (32c92a75-aa71-11ea-92ab-00163e433440)
If the push/pop level of the USB HID state is not restored within the processing of the same HID item, an invalid memory location may be used for subsequent HID item processing. Impact : An attacker with physical access to a USB port may be able to use a specially crafted USB device to gain kerne...
FreeBSD : Flash Player -- arbitrary code execution (196b31b8-aa9a-11ea-a59a-6451062f0f7a)
Adobe reports : - This update resolves a use-after-free vulnerability that could lead to arbitrary code execution CVE-2020-9633. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques...
CVE-2020-7456
In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with...
CVE-2020-7456
In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with...
Remote code execution
In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with...
CVE-2020-7456
Removed by vendor...
CVE-2020-7456
In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with...
CVE-2020-7456
CVE-2020-7456 affects FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1. The issue occurs when the USB HID descriptor processing fails to restore the push/pop level, allowing an attacker with physical access to ...
CVE-2020-13160
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution...
CVE-2020-13160
AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution...