FreeBSD : nghttp2 -- CWE-617: Reachable Assertion (c08273b5-30e5-11f1-b9f2-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c08273b5-30e5-11f1-b9f2-b42e991fc52e advisory. https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6 reports: nghttp2 is an...

FreeBSD : Python -- poplib module, when passed a user-controlled command, can have additional commands injected using newlines (6d3488ae-2e0f-11f1-88c7-00a098b42aeb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6d3488ae-2e0f-11f1-88c7-00a098b42aeb advisory. Python Software Foundation Security Developer reports: The poplib module, when passed a user-controlled...

FreeBSD : Python -- imaplib module, when passed a user-controlled command, can have additional commands injected using newlines (0be929a5-2e0f-11f1-88c7-00a098b42aeb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0be929a5-2e0f-11f1-88c7-00a098b42aeb advisory. Python Software Foundation Security Developer reports: The imaplib module, when passed a user-controlle...

FreeBSD : Python -- The webbrowser.open() API allows leading dashes (9fdad262-2e0f-11f1-88c7-00a098b42aeb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9fdad262-2e0f-11f1-88c7-00a098b42aeb advisory. https://github.com/python/cpython/pull/143931 reports: The webbrowser.open API would accept leading...

FreeBSD : chromium -- security fixes (1dc2aae1-0793-4dbd-8548-e63ae0e1bdaf)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1dc2aae1-0793-4dbd-8548-e63ae0e1bdaf advisory. Chrome Releases reports: This update includes 21 security fixes: Tenable has extracted the...

FreeBSD 安全漏洞

FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. There is a security vulnerability in FreeBSD, which stems from issues with hash calculations. This vulnerability may cause rules that use address-range syntax to be silently discarded, resulting in unexpected behaviors...

FreeBSD Buffer Overflow Vulnerability (CNVD-2026-16037)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A buffer overflow vulnerability exists in FreeBSD. The vulnerability stems from the routine to verify packet signatures in the RPCSECGSS implementation of kgssapi.ko not properly verifying data boundaries, which can be...

FreeBSD : Roundcube -- SVG Attribute Bypass (095e9db2-2b5b-11f1-9839-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 095e9db2-2b5b-11f1-9839-8447094a420f advisory. The Roundcube project reports: . Tenable has extracted the preceding description block directly from th...

FreeBSD : Gitlab -- vulnerabilities (b933083e-2b2e-11f1-b60a-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b933083e-2b2e-11f1-b60a-2cf05da270f3 advisory. Gitlab reports: Improper Handling of Parameters issue in Jira Connect installations impacts...

FreeBSD : traefik -- Multiple vulnerabilities (09e36f7e-2b5b-11f1-852e-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 09e36f7e-2b5b-11f1-852e-5404a68ad561 advisory. The traefik project releases a new version addressing multiple CVEs: Tenable has extracted the...

FreeBSD : jenkins -- multiple vulnerabilities (970fd0ec-26f5-11f1-a9b1-0cc47ada5f32)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 970fd0ec-26f5-11f1-a9b1-0cc47ada5f32 advisory. Jenkins Security Advisory 2026-03-18: Tenable has extracted the preceding description block...

CVE-2026-4748

creationtimestamp| type| source ---|---|--- 2026-03-27 13:50:17+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/freebsd-security-advisory-av26-291 2026-04-01 08:40:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3migc73qfpe2i 2026-04-01 16:30:00+00:00| seen|...

EUVD-2026-16128

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

CVE-2026-4247

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

CVE-2026-4247 TCP: remotely exploitable DoS vector (mbuf leak)

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

CVE-2026-4247

A memory leak vulnerability exists in the FreeBSD TCP stack within the tcp_respond() function. When the system decides not to send a challenge ACK, the function returns without consuming the passed mbuf , leading to a memory leak. An attacker who can establish a TCP connection or is on-path can c...

CVE-2026-4247

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

CVE-2026-4247 TCP: remotely exploitable DoS vector (mbuf leak)

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

CVE-2026-4247: Missing Release of Memory after Effective Lifetime

When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established TCP connection, or can themselves...

FreeBSD 安全漏洞

FreeBSD is a Unix-like operating system developed by the FreeBSD Foundation. There is a security vulnerability in FreeBSD, which stems from the tcprespond function returning and leaking the mbuf when an ACK should not be sent. This vulnerability could allow attackers to exploit the system by...