1726 matches found
OpenBSD 安全漏洞
OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project team. A security vulnerability exists in OpenBSD NFS versions 7.4 through 14.0 that originates from a vulnerability that allows remote attackers to execute arbitrary code...
whoami stack buffer overflow on several Unix platforms
With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...
GHSA-W5W5-8VFH-XCJQ whoami stack buffer overflow on several Unix platforms
With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...
The vulnerability in the implementation of the NFS network file system server for FreeBSD and OpenBSD allows a hacker to execute arbitrary code with root privileges.
The vulnerability of the NFS network file system server implementation for FreeBSD and OpenBSD is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
CVE-2024-29937
NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption...
CVE-2024-29937
OpenBSD/OpenBSD-derived NFS fault (affecting OpenBSD up to 7.4 and FreeBSD up to 14.0-RELEASE) allows remote arbitrary code execution via a bug that is unrelated to memory corruption. Root cause details are not disclosed in the provided documents; no remediation or exploitation status is specifie...
CVE-2023-52558
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...
CVE-2023-52556
In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...
CVE-2023-52556
In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...
CVE-2023-52558
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...
CVE-2023-52557
In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...
CVE-2023-52557
In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...
Code injection
In OpenBSD 7.3 before errata 016, npppd8 could crash by a l2tp message which has an AVP Attribute-Value Pair with wrong length...
Design/Logic Flaw
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...
Race condition
In OpenBSD 7.4 before errata 009, a race condition between pf4's processing of packets and expiration of packet states may cause a kernel panic...
CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...
CVE-2023-52558 OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash
In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences...
CVE-2023-52558
CVE-2023-52558 affects OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019. A kernel crash can occur from a network buffer that must be split at a certain length after receiving specially crafted escape sequences. The issue arises in the m_split handling; patches 002_msplit.patch (Ope...
CVE-2023-52557
OpenBSD 7.3 prior to errata 016 is affected. The npppd(8) component may crash when processing an L2TP message containing an AVP with an incorrect length. The issue is addressed by OpenBSD patch errata 016 for 7.3 (reference patches: 016_npppd.patch.sig; commit abf3a29384c582c807a621e7fc6e7c68d0ca...