FreeBSD : xrdp -- multiple vulnerabilities (a3a34818-79a0-11f1-b295-98b78501ef2a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a3a34818-79a0-11f1-b295-98b78501ef2a advisory. xrdp projects reports: xrdp v0.10.6.1 fixes 10 vulnerabilities and 1 regression introduced by ...

EUVD-2026-25006

uucore: safetraversal TOCTOU protection only enabled on Linux...

FreeBSD : traefik -- Multiple vulnerabilities (803b9816-77af-11f1-ba71-5404a68ad561)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 803b9816-77af-11f1-ba71-5404a68ad561 advisory. The traefik project releases a new version addressing multiple CVEs: Tenable has extracted the...

FreeBSD : Roundcube -- Multiple vulnerabilities (d5578ba4-7889-11f1-b72c-8447094a420f)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d5578ba4-7889-11f1-b72c-8447094a420f advisory. The Rouncube project reports: See links for more detail Tenable has extracted the preceding...

FreeBSD : openvpn -- multiple vulnerabilities (ffa897a0-756f-11f1-b291-a74de6bb0320)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ffa897a0-756f-11f1-b291-a74de6bb0320 advisory. The OpenVPN community project team reports: ... OpenVPN 2.7.5 ... is a bugfix release fixing...

FreeBSD : FreeBSD -- Multiple vulnerabilities in iconv(3) (78910e7e-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 78910e7e-74e3-11f1-958d-bc241121aa0a advisory. Several encoding modules, including HZ, UTF-7, VIQR, and ZW, did not properly check the size o...

FreeBSD : FreeBSD -- Jail reference count underflow (a65c31d1-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a65c31d1-74e0-11f1-958d-bc241121aa0a advisory. When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller...

FreeBSD : FreeBSD -- Local privilege escalation via execve(2) TOCTOU race (4b0d0a49-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4b0d0a49-74e1-11f1-958d-bc241121aa0a advisory. During execve2 of a SUID binary, the new virtual address space is installed before the process...

FreeBSD : FreeBSD -- Use-after-free in device pager page list (5a34b147-74e0-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5a34b147-74e0-11f1-958d-bc241121aa0a advisory. When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the...

FreeBSD : FreeBSD -- Buffer overflow in libalias RTSP handler (f5dd96dd-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f5dd96dd-74e1-11f1-958d-bc241121aa0a advisory. The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking...

FreeBSD : FreeBSD -- Kernel stack disclosure in Linux compatibility layer (2355c475-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2355c475-74e3-11f1-958d-bc241121aa0a advisory. The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux...

FreeBSD : FreeBSD -- Use-after-free in TCP RACK stack option handler (6c547c1b-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6c547c1b-74e2-11f1-958d-bc241121aa0a advisory. The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, the...

FreeBSD : FreeBSD -- Remote DOS via uninitialized memory access in KTLS receive (fb1bf2ae-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fb1bf2ae-74e2-11f1-958d-bc241121aa0a advisory. When building the iovec array for a received TLS 1.2 CBC record, ktlsocftlscbcdecrypt incremented the...

FreeBSD : FreeBSD -- Incorrect audit records for ptrace(2) syscall requests (cd658f09-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cd658f09-74e2-11f1-958d-bc241121aa0a advisory. When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an...

FreeBSD : FreeBSD -- Multiple vulnerabilities in OpenZFS (9534b664-74e1-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9534b664-74e1-11f1-958d-bc241121aa0a advisory. The ZFSIOCUSERSPACEMANY ioctl, used by zfs-userspace8, truncated a 64-bit output buffer size t...

FreeBSD : FreeBSD -- unlinkat(2) ignores AT_RESOLVE_BENEATH flag (33fd66d1-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 33fd66d1-74e2-11f1-958d-bc241121aa0a advisory. The kernel function that implements unlinkat2 and funlinkat2 validated the ATRESOLVEBENEATH flag but...

FreeBSD : FreeBSD-kernel -- Kernel stack disclosure in 32-bit compatibility support (43f9ca02-74e3-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43f9ca02-74e3-11f1-958d-bc241121aa0a advisory. The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It...

FreeBSD : FreeBSD -- Multiple vulnerabilities in POSIX largepage objects (91017b3b-74e2-11f1-958d-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 91017b3b-74e2-11f1-958d-bc241121aa0a advisory. Pages belonging to largepage shared memory objects were not explicitly wired. When sendfile2...

PT-2026-55227

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A race condition exists in the execve system call during the execution of a SUID binary. The kernel installs the new virtual address space before updating the process credentials. This create...

PT-2026-70013

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description Calling the msyncMS INVALIDATE function on a mapping of an unmanaged device object causes physical pages in the mapping range to be marked invalid while remaining in the pager's page list. A...