FreeBSD : Mozilla -- Integer overflow (c4972d4f-3d93-11f1-9073-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c4972d4f-3d93-11f1-9073-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=2009552 reports: Integer overflow in the Libraries componen...

FreeBSD : FreeBSD -- Missing large page handling in pmap_pkru_update_range() (128951d0-3df0-11f1-bb07-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 128951d0-3df0-11f1-bb07-bc241121aa0a advisory. In order to apply a particular protection key to an address range, the kernel must update the...

FreeBSD 资源管理错误漏洞

FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. There is a resource management vulnerability in FreeBSD, which stems from the TIOCNOTTY implementation failing to clear the pointer pointing to the control terminal structure of the calling process. This could allow...

FreeBSD Security Advisory - FreeBSD-SA-26:10.tty

FreeBSD Security Advisory - The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory. A...

FreeBSD -- Kernel use-after-free bug in the TIOCNOTTY handler

Problem Description: The implementation of TIOCNOTTY failed to clear a back-pointer from the structure representing the controlling terminal to the calling process' session. If the invoking process then exits, the terminal structure may end up containing a pointer to freed memory. Impact: A...

FreeBSD : ejabberd -- Potential DDoS in XML Parser (82064ab5-3d76-11f1-89ab-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 82064ab5-3d76-11f1-89ab-901b0e9408dc advisory. ejabberd team reports: This release adds new options that limit max memory used by XML parser used to...

FreeBSD-SA-26:10.tty

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:10.tty Security Advisory The FreeBSD Project Topic: Kernel use-after-free bug in the TIOCNOTTY handler Category: core Module: tty Announced: 2026-04-21...

FreeBSD-SA-26:11.amd64

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:11.amd64 Security Advisory The FreeBSD Project Topic: Missing large page handling in pmappkruupdaterange Category: core Module: amd64 Announced: 2026-04-21...

FreeBSD : zeek -- potential DoS vulnerabilities (0d8b1126-0864-4934-b63f-c713526ead32)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0d8b1126-0864-4934-b63f-c713526ead32 advisory. Tim Wojtulewicz of Corelight reports: A series of DNS messages containing long DNS compression chains c...

FreeBSD -- Missing large page handling in pmap_pkru_update_range()

Problem Description: In order to apply a particular protection key to an address range, the kernel must update the corresponding page table entries. The subroutine which handled this failed to take into account the presence of 1GB largepage mappings created using the shmcreatelargepage3 interface...

FreeBSD : OpenEXR -- several integer overflow vulnerabilities (7b83af27-3a86-11f1-90cd-41d47652b1c2)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7b83af27-3a86-11f1-90cd-41d47652b1c2 advisory. Cary Phillips reports: OpenEXR 3.4.10 is a patch release that addresses the following security...

FreeBSD : xrdp -- Multiple vulnerabilities (6f1c19bf-3b29-11f1-930b-98b78501ef2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6f1c19bf-3b29-11f1-930b-98b78501ef2a advisory. xrdp project reports: This release includes 8 security fixes: Tenable has extracted the...

FreeBSD : Python -- use-after-free vulnerability in decompressors under memory pressure (b8e9f33c-375d-11f1-a119-e36228bfe7d4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b8e9f33c-375d-11f1-a119-e36228bfe7d4 advisory. Seth Larson reports: There is a CRITICAL severity vulnerability affecting CPython. Use-after-free UAF w...

FreeBSD : py-strawberry-graphql -- Multiple vulnerabilities (6a0aa20d-399f-11f1-8626-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6a0aa20d-399f-11f1-8626-901b0edee044 advisory. The Strawberry GraphQL project reports: Strawberry up until version 0.312.3 is vulnerable to a...

FreeBSD : Mozilla -- Memory safety bugs (6ae8f9e5-3a26-11f1-b60b-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6ae8f9e5-3a26-11f1-b60b-b42e991fc52e advisory. Mozilla reports: Memory safety bugs present in Firefox ESR, Firefox ESR , Thunderbird ESR, and...

FreeBSD : python -- more webbrowser.open() command injection vulnerabilities (cf75f572-378a-11f1-a119-e36228bfe7d4)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cf75f572-378a-11f1-a119-e36228bfe7d4 advisory. Seth Larson reports: CVE-2026-4786 Incomplete mitigation of CVE-2026-4519, %action expansion for comman...

FreeBSD : go-ethereum -- vulnerabilities (9c8c00ce-3642-11f1-bd03-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9c8c00ce-3642-11f1-bd03-3c7c3fba4204 advisory. https://github.com/ethereum/go-ethereum/security/advisories reports: Tenable has extracted the...

FreeBSD : PHP Composer -- Multiple vulnerabilities (7a7a17b2-381c-11f1-a663-10ffe07f9334)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7a7a17b2-381c-11f1-a663-10ffe07f9334 advisory. Composer project reports: Fixed command injection via malicious Perforce reference...

FreeBSD : xorg-server -- Multiple vulnerabilities (7b6463c6-3813-11f1-a284-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7b6463c6-3813-11f1-a284-589cfc10a551 advisory. X.Org project reports: Multiple issues have been found in the X server and Xwayland...

FreeBSD : xwayland -- Multiple vulnerabilities (099423d1-3815-11f1-a284-589cfc10a551)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 099423d1-3815-11f1-a284-589cfc10a551 advisory. X.Org project reports: Multiple issues have been found in the X server and Xwayland...