FreeBSD : php -- env_path_info underflow in fpm_main.c can lead to RCE (6a7c2ab0-00dd-11ea-83ce-705a0f828759)

The PHP project reports : The PHP development team announces the immediate availability of PHP 7.3.11. This is a security release which also contains several bug fixes. The PHP development team announces the immediate availability of PHP 7.2.24. This is a security release which also contains...

FreeBSD Denial of Service Vulnerability (CNVD-2019-40092)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation.NSD is one of the name server daemons. A denial of service vulnerability exists in FreeBSD NSD versions prior to 3.2.13, which can be exploited by remote attackers to cause a denial of service crash...

FreeBSD : MySQL -- Multiple vulerabilities (fc91f2ef-fd7b-11e9-a1c7-b499baebfeaf)

Oracle reports : This Critical Patch Update contains 31 new security fixes for Oracle MySQL. 6 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. C Tenable Network Security, Inc. The descriptive te...

FreeBSD : file -- Heap buffer overflow possible (381deebb-f5c9-11e9-9c4f-74d435e60b7c)

mitre reports cdfreadpropertyinfo in cdf.c in file through 5.37 does not restrict the number of CDFVECTOR elements, which allows a heap-based buffer overflow 4-byte out-of-bounds write. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD : mediawiki -- multiple vulnerabilities (c32285fe-fde4-11e9-9525-000c29c4dc65)

MediaWiki reports : Security fixes : T230402, CVE-2019-16738 SECURITY: Add permission check for suppressed account to Special:Redirect. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2019...

CVE-2019-18667

/usr/local/www/freeradiusviewconfig.php in the freeradius3 package before 0.15.73 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser...

Default credentials

/usr/local/www/freeradiusviewconfig.php in the freeradius3 package before 0.15.73 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser...

CVE-2019-18667

CVE-2019-18667 affects pfSense deployments using the freeradius3 package on FreeBSD. The vulnerability is in /usr/local/www/freeradius_view_config.php and arises from insufficient input validation, enabling a user-supplied XSS payload in password or username fields to execute arbitrary JavaScript...

CVE-2019-18667

/usr/local/www/freeradiusviewconfig.php in the freeradius3 package before 0.15.73 for pfSense on FreeBSD allows a user with an XSS payload as password or username to execute arbitrary javascript code on a victim browser...

CVE-2012-2979

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process SIGSEGV and cause a denial of service in the NSD server...

Code injection

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process SIGSEGV and cause a denial of service in the NSD server...

CVE-2012-2979

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process SIGSEGV and cause a denial of service in the NSD server...

UBUNTU-CVE-2012-2979

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process SIGSEGV and cause a denial of service in the NSD server...

CVE-2012-2979

CVE-2012-2979 affects FreeBSD NSD before 3.2.13. A remote attacker can cause a crash of a NSD child server process (SIGSEGV), leading to denial of service in the NSD server. The vulnerability is exploitable over the network with no authentication and no user interaction required, with impact on a...

CVE-2012-2979

FreeBSD NSD before 3.2.13 allows remote attackers to crash a NSD child server process SIGSEGV and cause a denial of service in the NSD server...

FreeBSD : webkit2-gtk3 -- Multiple vulnerabilities (92243b6a-5775-4aea-8727-a938058df5ba)

The WebKitGTK project reports multiple vulnerabilities. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2022 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compile...

FreeBSD : samba -- multiple vulnerabilities (50a1bbc9-fb80-11e9-9e70-005056a311d1)

The samba project reports : Malicious servers can cause Samba client code to return filenames containing path separators to calling code. When the password contains multi-byte non-ASCII characters, the check password script does not receive the full password string. Users with the 'get changes'...

FreeBSD : gitea -- information disclosure (fd10aa77-fb5e-11e9-af7b-0800274e5f20)

The Gitea Team reports : When a comment in an issue or PR mentions a user using @username, the mentioned user receives a mail notification even if they don't have permission to see the originating repository. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

FreeBSD : varnish -- Information Disclosure Vulnerability (2d4076eb-f679-11e9-a87f-a4badb2f4699)

Varnish Software reports : A bug has been discovered in Varnish Cache where we fail to clear a pointer between the handling of one client requests and the next on the same connection. This can under specific circumstances lead to information being leaked from the connection workspace. C Tenable...

FreeBSD : FreeBSD -- Reference count overflow in mqueue filesystem 32-bit compat (53b3474c-f680-11e9-a87f-a4badb2f4699)

System calls operating on file descriptors obtain a reference to relevant struct file which due to a programming error was not always put back, which in turn could be used to overflow the counter of affected struct file. Impact : A local user can use this flaw to obtain access to files,...