16066 matches found
CVE-2016-1889
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor...
Authentication flaw
The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."...
Design/Logic Flaw
The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service crash or potentially gain privilege via a crafted Linux compatibility layer setgroups system call...
CVE-2016-1881
The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service crash or potentially gain privilege via a crafted Linux compatibility layer setgroups system call...
CVE-2016-1883
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors...
Code injection
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...
CVE-2016-1880
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...
CVE-2016-1883
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors...
Integer overflow
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor...
CVE-2016-1888
The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation failures."...
CVE-2016-1880
The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...
CVE-2016-1889
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor...
CVE-2016-1888
The CVE-2016-1888 issue affects FreeBSD telnetd(8) on FreeBSD releases including 9.3, 10.x, and 11.x. A vulnerability arises from an unexpected sequence of memory allocation failures combined with insufficient error checking during the construction of the argument array passed to login(1). This c...
CVE-2016-1883
The CVE-2016-1883 entry describes a programming error in FreeBSD’s Linux compatibility layer that could cause the issetugid(2) system call to return incorrect information. Impact: if an application relies on that output, a privilege escalation could occur. Affected releases: FreeBSD stable/9 (9.3...
CVE-2016-1881
Removed by vendor...
CVE-2016-1889
The CVE-2016-1889 entry describes an integer overflow in bhyve (FreeBSD hypervisor) when a guest is configured with more than about 3GB of memory. A crafted device descriptor could allow a local attacker to gain privileges by exploiting bounds-checking overflow in memory accesses by device emulat...
CVE-2016-1880
CVE-2016-1880 concerns FreeBSD’s Linux binary compatibility layer. The issue arises from a programming error in handling Linux futex robust lists, potentially allowing a local user to read portions of kernel memory and escalate privileges on affected systems. Affected: FreeBSD versions with Linux...
CVE-2016-1883
The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors...