FreeBSD -- pf silently ignores certain rules

Problem Description: A regression in the way hashes were calculated caused rules containing the address range syntax x.x.x.x - y.y.y.y that only differ in the address ranges involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf. Ranges expressed...

FreeBSD : chromium -- security fixes (07d6b170-fed8-4ee2-ba96-b6d61b6d6a26)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 07d6b170-fed8-4ee2-ba96-b6d61b6d6a26 advisory. Chrome Releases reports: This update includes 8 security fixes: Tenable has extracted the...

FreeBSD : chromium -- security fixes (3c370171-b6b6-463a-8746-ee49bea08c87)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3c370171-b6b6-463a-8746-ee49bea08c87 advisory. Chrome Releases reports: This update includes 26 security fixes: Tenable has extracted the...

FreeBSD -- Remote code execution via RPCSEC_GSS packet validation

Problem Description: Each RPCSECGSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stack overflow. Notabl...

FreeBSD -- Remote denial of service via null pointer dereference

Problem Description: On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID. Impact: An attacker with network access to the NVMe/TCP target can trigger an unauthenticated Denial of Service...

FreeBSD -- TCP: remotely exploitable DoS vector (mbuf leak)

Problem Description: When a challenge ACK is to be sent tcprespond constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. Impact: If an attacker is either on path with an established TCP...

OwnTone 安全漏洞

OwnTone is an open-source Linux/FreeBSD DAAP iTunes, MPD Music Player Daemon, and RSP Roku media server. Previous versions of OwnTone c4d57aa contained security vulnerabilities, which stemmed from a null pointer dereferencing in the safeatou64 function, potentially leading to denial-of-service...

OwnTone 安全漏洞

OwnTone is an open-source Linux/FreeBSD DAAP iTunes, MPD Music Player Daemon, and RSP Roku media server. OwnTone has a security vulnerability that stems from a null pointer dereferencing in the daapreplyplaylists function. This vulnerability could allow attackers to cause denial of service by...

FreeBSD : traefik -- Multiple vulnerabilities (832a823b-25b5-11f1-b6f8-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 832a823b-25b5-11f1-b6f8-5404a68ad561 advisory. The traefik project releases a new version addressing multiple CVEs: Tenable has extracted the...

PT-2026-70017

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description The Linux compatibility layer implementation of the waitid system call fails to zero a stack-declared Linux siginfo t structure when translating it from a FreeBSD siginfo t structure. This...

PT-2026-70018

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description The compat32 kevent handler in the Linuxulator compatibility layer fails to zero a stack-declared 32-bit struct when translating a 64-bit kevent struct. This use of an uninitialized variable...

FreeBSD : UniFi Network Application - Multiple vulnerabilities (71b4ce56-23c5-11f1-b865-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 71b4ce56-23c5-11f1-b865-b42e991fc52e advisory...

FreeBSD : Roundcube -- Multiple vulnerabilities (c5b93cb5-2363-11f1-81da-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the c5b93cb5-2363-11f1-81da-8447094a420f advisory. The Roundcube project reports: pre-auth arbitrary file write via unsafe deserialization in redis/memcac...

FreeBSD : homebox -- multiple vulnerabilities (db3bdcc6-377f-47d9-9ce8-4bdede4fdafe)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the db3bdcc6-377f-47d9-9ce8-4bdede4fdafe advisory. Homebox reports: Tenable has extracted the preceding description block directly from the FreeB...

The vulnerability of the rtsock_msg_buffer() function in the operating system kernel of FreeBSD, which allows a hacker to cause a service failure

The vulnerability of the rtsockmsgbuffer function in the kernel of the FreeBSD operating system is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the FreeBSD operating system’s kernel, which allows a hacker to gain access to the file system

The vulnerability of FreeBSD operating systems lies in the insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to gain access to the file system...

FreeBSD : chromium -- security fixes (e45fb606-b731-4871-881d-27a1d5e2fd03)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e45fb606-b731-4871-881d-27a1d5e2fd03 advisory. Chrome Releases reports: This update includes 29 security fixes: Tenable has extracted the...

FreeBSD : chromium -- security fix (73eeb578-fd13-4d79-b50b-ed25c3614528)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 73eeb578-fd13-4d79-b50b-ed25c3614528 advisory. Chrome Releases reports: This update includes 1 security fix: Tenable has extracted the preceding...

FreeBSD : chromium -- security fixes (26776062-fd24-4c2f-bf6c-7f231948ab19)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 26776062-fd24-4c2f-bf6c-7f231948ab19 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the...

FreeBSD : OpenSSL -- key agreement vulnerability (ee1e6a24-1eeb-11f1-81da-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ee1e6a24-1eeb-11f1-81da-8447094a420f advisory. The OpenSSL project reports: TLS 1.3 server may choose unexpected key agreement group Low An OpenSSL TL...