FreeBSD -- Multiple issues in the bhyve hypervisor

Problem Description: Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over- read from a guest-controlled value. CVE-2024-51562 The virtiovqrecordon function is subject to a time-of-check to time-of-use...

FreeBSD-SA-24:19.fetch

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:19.fetch Security Advisory The FreeBSD Project Topic: Certificate revocation list fetch1 option fails Category: core Module: fetch Announced: 2024-10-29...

FreeBSD-SA-24:18.ctl

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:18.ctl Security Advisory The FreeBSD Project Topic: Unbounded allocation in ctl4 CAM Target Layer Category: core Module: ctl Announced: 2024-10-29 Credits:...

FreeBSD-SA-24:17.bhyve

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:17.bhyve Security Advisory The FreeBSD Project Topic: Multiple issues in the bhyve hypervisor Category: core Module: bhyve Announced: 2024-10-29 Credits:...

PT-2024-28419 · Freebsd · Freebsd

Name of the Vulnerable Software and Affected Versions: FreeBSD affected versions not specified Description: The issue allows the caller to specify an arbitrary size using the ctl persistent reserve out command, which will be passed to the kernel's memory allocator. This could potentially lead to...

FreeBSD : chromium -- multiple security fixes (1e71e366-080b-4e8f-a9e6-150bf698186b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1e71e366-080b-4e8f-a9e6-150bf698186b advisory. Chrome Releases reports: This update includes 17 security fixes: Tenable has extracted the...

FreeBSD : chromium -- multiple security fixes (fafaef4d-f364-4a07-bbdd-bf53448c593c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fafaef4d-f364-4a07-bbdd-bf53448c593c advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...

FreeBSD : Gitlab -- vulnerabilities (78e6c113-91c1-11ef-a904-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 78e6c113-91c1-11ef-a904-2cf05da270f3 advisory. Gitlab reports: HTML injection in Global Search may lead to XSS DoS via XML manifest file impo...

FreeBSD : electron31 -- multiple vulnerabilities (fcb0e00f-d7d3-49b6-a4a1-852528230912)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fcb0e00f-d7d3-49b6-a4a1-852528230912 advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : electron32 -- multiple vulnerabilities (cc068959-ce2b-42eb-81ed-055551fe0e51)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cc068959-ce2b-42eb-81ed-055551fe0e51 advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

FreeBSD : oauth2-proxy -- multiple vulnerabilities (dbe8c5bd-8d3f-11ef-8d2e-a04a5edf46d9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the dbe8c5bd-8d3f-11ef-8d2e-a04a5edf46d9 advisory. The oauth2-proxy project reports: Vulnerabilities have been addressed: Tenable has extracted t...

FreeBSD : OpenSSL -- OOB memory access vulnerability (c6f4177c-8e29-11ef-98e7-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c6f4177c-8e29-11ef-98e7-84a93843eb75 advisory. The OpenSSL project reports: Low-level invalid GF2^m parameters lead to OOB memory access CVE-2024-9143...

FreeBSD : electron{31,32} -- multiple vulnerabilities (815bf172-ab9e-4c4b-9662-d18b0054330d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 815bf172-ab9e-4c4b-9662-d18b0054330d advisory. Electron developers report: This update fixes the following vulnerabilities: Tenable has...

MAL-2024-9634 Malicious code in freebsd-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in freebsd-x64 (npm)

--- -= Per source details. Do not edit below this line.=-...

FreeBSD : element-web -- Potential exposure of access token via authenticated media (851ce3e4-8b03-11ef-84e9-901b0e9408dc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 851ce3e4-8b03-11ef-84e9-901b0e9408dc advisory. Element team reports: Element Web versions 1.11.70 through 1.11.80 contain a vulnerability which can,...

FreeBSD : vscode -- Visual Studio Code for Linux Remote Code Execution Vulnerability (64e299b6-d12b-4a7a-a94f-ab133703925a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 64e299b6-d12b-4a7a-a94f-ab133703925a advisory. VSCode developers report: Visual Studio Code for Linux Remote Code Execution Vulnerability A remote cod...

FreeBSD : firefox -- use-after-free code execution (2fb13238-872d-11ef-bd1e-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2fb13238-872d-11ef-bd1e-b42e991fc52e advisory. [email protected] reports: An attacker was able to achieve code execution in the content process by...

FreeBSD : Gitlab -- vulnerabilities (cc1ac01e-86b0-11ef-9369-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the cc1ac01e-86b0-11ef-9369-2cf05da270f3 advisory. Gitlab reports: Run pipelines on arbitrary branches An attacker can impersonate arbitrary user...

FreeBSD : chromium -- multiple security fixes (7217f6e8-3ff4-4387-845d-d1744bb7f95e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7217f6e8-3ff4-4387-845d-d1744bb7f95e advisory. Chrome Releases reports: This update includes 3 security fixes: Tenable has extracted the...