FreeBSD : Roundcube -- Multiple vulnerabilities (d5578ba4-7889-11f1-b72c-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d5578ba4-7889-11f1-b72c-8447094a420f advisory. The Rouncube project reports: See links for more detail Tenable has extracted the preceding...

FreeBSD : openvpn -- multiple vulnerabilities (ffa897a0-756f-11f1-b291-a74de6bb0320)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ffa897a0-756f-11f1-b291-a74de6bb0320 advisory. The OpenVPN community project team reports: ... OpenVPN 2.7.5 ... is a bugfix release fixing...

WinRAR flaw could allow attackers to take control of your computer

Rarlab has released a new version of the popular WinRAR tool to patch a vulnerability that can be abused in remote code execution attacks. The issue is fixed in WinRAR 7.23, but users must install the new version manually because WinRAR still does not offer automatic updates. They also need to ma...

FreeBSD : chromium -- security fixes (659e52d0-7574-11f1-8de5-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 659e52d0-7574-11f1-8de5-a8a1599412c6 advisory. Chrome Releases reports: This update includes 382 security fixes: Tenable has extracted the...

FreeBSD : FreeBSD -- Multiple vulnerabilities in OpenZFS (9534b664-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9534b664-74e1-11f1-958d-bc241121aa0a advisory. The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size t...

FreeBSD : FreeBSD -- Incorrect audit records for ptrace(2) syscall requests (cd658f09-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cd658f09-74e2-11f1-958d-bc241121aa0a advisory. When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an...

FreeBSD : FreeBSD -- Local privilege escalation via execve(2) TOCTOU race (4b0d0a49-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4b0d0a49-74e1-11f1-958d-bc241121aa0a advisory. During execve2 of a SUID binary, the new virtual address space is installed before the process...

FreeBSD : FreeBSD -- Multiple vulnerabilities in iconv(3) (78910e7e-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 78910e7e-74e3-11f1-958d-bc241121aa0a advisory. Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size o...

FreeBSD : FreeBSD -- unlinkat(2) ignores AT_RESOLVE_BENEATH flag (33fd66d1-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 33fd66d1-74e2-11f1-958d-bc241121aa0a advisory. The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but...

FreeBSD : icinga2 -- Improper access control for JSON-RPC update certificate messages (5b7cb356-749c-11f1-8a71-50ebf6bdf8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5b7cb356-749c-11f1-8a71-50ebf6bdf8e9 advisory. The Icinga team reports: The code handling certificate update JSON-RPC messages was flawed and did not...

FreeBSD : FreeBSD -- Use-after-free in device pager page list (5a34b147-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a34b147-74e0-11f1-958d-bc241121aa0a advisory. When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the...

FreeBSD : FreeBSD -- Multiple vulnerabilities in POSIX largepage objects (91017b3b-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 91017b3b-74e2-11f1-958d-bc241121aa0a advisory. Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile2...

FreeBSD : FreeBSD -- Kernel stack disclosure in Linux compatibility layer (2355c475-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2355c475-74e3-11f1-958d-bc241121aa0a advisory. The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux...

FreeBSD : FreeBSD-kernel -- Kernel stack disclosure in 32-bit compatibility support (43f9ca02-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43f9ca02-74e3-11f1-958d-bc241121aa0a advisory. The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It...

FreeBSD : FreeBSD -- Use-after-free in TCP RACK stack option handler (6c547c1b-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6c547c1b-74e2-11f1-958d-bc241121aa0a advisory. The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, the...

FreeBSD : FreeBSD -- Remote DOS via uninitialized memory access in KTLS receive (fb1bf2ae-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fb1bf2ae-74e2-11f1-958d-bc241121aa0a advisory. When building the iovec array for a received TLS 1.2 CBC record, ktlsocftlscbcdecrypt incremented the...

FreeBSD : FreeBSD -- Jail reference count underflow (a65c31d1-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a65c31d1-74e0-11f1-958d-bc241121aa0a advisory. When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller...

FreeBSD : FreeBSD -- Buffer overflow in libalias RTSP handler (f5dd96dd-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f5dd96dd-74e1-11f1-958d-bc241121aa0a advisory. The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking...

PT-2026-70014

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description An issue exists in the kern jail set and kern jail get functions when the JAIL AT DESC flag is used. The system releases the reference to the caller's current prison before searching for the...

PT-2026-55227

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A race condition exists in the execve system call during the execution of a SUID binary. The kernel installs the new virtual address space before updating the process credentials. This create...