CVE-2026-39461: Stack-based Buffer Overflow

libcasper3 communicates with helper processes via UNIX domain sockets, and uses the select2 system call to wait for data to become available. However, it does not verify that its socket descriptor fits within select2's descriptor set size limit of FDSETSIZE 1024. An attacker able to cause an...

CVE-2023-5978

In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the capnet libcasper3 service incorrectly validates that updated constraints are strictly subsets of the active constraints. When only a list of resolvable domain names was specified without setting any other...

FreeBSD : FreeBSD -- Incorrect libcap_net limitation list manipulation (f4464e49-7e04-11ee-8e38-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f4464e49-7e04-11ee-8e38-002590c1f29c advisory. - In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the capnet...