PT-2026-36009

Name of the Vulnerable Software and Affected Versions FreeBSD dhclient affected versions not specified Description The FreeBSD DHCP client fails to escape embedded double-quotes when writing the BOOTP file field to the lease file. This allows a rogue DHCP server on the same network to inject...

FreeBSD Security Advisory - FreeBSD-SA-26:17.libnv

FreeBSD Security Advisory - When processing the header of an incoming message, libnv failed to properly validate the message size...

FreeBSD -- Heap overflow in libnv

Problem Description: When processing the header of an incoming message, libnv failed to properly validate the message size. Impact: The lack of validation allows a malicious program to write outside the bounds of a heap allocation. This can trigger a crash or system panic, and it may be possible...

PT-2026-36008

Name of the Vulnerable Software and Affected Versions libnv affected versions not specified Description When exchanging data over a socket, the software uses the select function to wait for data. It fails to verify if the provided socket descriptor exceeds the file descriptor set size limit of FD...

The vulnerability of the libnv library in FreeBSD systems allows attackers to increase their privileges or cause service failures.

The vulnerability of the libnv library in FreeBSD systems is related to a potential overflow due to incorrect calculations of buffer size. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

FreeBSD : FreeBSD -- Integer overflow in libnv (93c12fe5-7716-11ef-9a62-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 93c12fe5-7716-11ef-9a62-002590c1f29c advisory. A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the...

FreeBSD -- Integer overflow in libnv

Problem Description: A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data. The introduced check was incorrect, as it took into account the size of the pointer, not the structure. Thi...

FreeBSD-SA-24:16.libnv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:16.libnv Security Advisory The FreeBSD Project Topic: Integer overflow in libnv Category: core Module: libnv Announced: 2024-09-19 Credits: Miłosz Kaniewski...

FreeBSD : FreeBSD -- Multiple vulnerabilities in libnv (8d1f9adf-6b4f-11ef-9a62-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8d1f9adf-6b4f-11ef-9a62-002590c1f29c advisory. CVE-2024-45287 is a vulnerability that affects both the kernel and userland. A malicious value...

CVE-2024-45287

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

CVE-2024-45287

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

CVE-2024-45288 Multiple vulnerabilities in libnv

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer...

CVE-2024-45288 Multiple vulnerabilities in libnv

A missing null-termination character in the last element of an nvlist array string can lead to writing outside the allocated buffer...

CVE-2024-45287 Multiple vulnerabilities in libnv

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

CVE-2024-45287

The libnv library (also known as nvlist ) in FreeBSD systems is vulnerable to an integer overflow caused by incorrect buffer size calculations. A malicious value in a structure of packed libnv can lead to the allocation of a buffer smaller than required for the parsed data, affecting both kernel ...

CVE-2024-45287 Multiple vulnerabilities in libnv

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

FreeBSD 安全漏洞

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from a malicious size value in the libnv structure that could lead to an integer overflow...

CVE-2024-45287: Incorrect Calculation of Buffer Size

A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data...

FreeBSD -- Multiple vulnerabilities in libnv

Problem Description: CVE-2024-45287 is a vulnerability that affects both the kernel and userland. A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required for the parsed data. CVE-2024-45288 is a...

FreeBSD-SA-24:09.libnv

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-24:09.libnv Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in libnv Category: core Module: libnv Announced: 2024-09-04 Credits: Taylor R...