CveMateVulnerability intelligence

Bsd vulnerabilities

11 vulnerabilities

Known vulnerabilities in Bsd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.

Products

5

Bsd7 vulnerabilities
Libc Library1 vulnerabilities
Lpr1 vulnerabilities
Mailx1 vulnerabilities
Nvi1 vulnerabilities

CVE-2003-0144bsdlpr+523y ago14-03-2003 05:00

Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.CVE-2016-6559bsdlibc library+18y ago13-07-2018 20:00

Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depends on the method of exploit and how the library is used by applications. According to analysis by FreeBSD developers, it is very unlikely that applications exist that utilize link_ntoa() in an exploitable manner, and the CERT/CC is not aware of any proof of concept. A blog post describes the functionality of link_ntoa() and points out that none of the base utilities use this function in an exploitable manner. For more information, please see FreeBSD Security Advisory SA-16:37.CVE-2014-7250bsdbsd+411y ago12-12-2014 02:00

The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.CVE-2014-7844bsd_mailx_projectbsd_mailx+116y ago14-01-2020 16:13

BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.CVE-2001-1562bsdnvi+121y ago14-07-2005 04:00

Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.CVE-2001-0670bsdbsd+224y ago09-03-2002 05:00

Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.CVE-2008-4609chainguardlinux-aws-6.12+3818y ago20-10-2008 17:00

The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.CVE-1999-1471bsdbsd25y ago12-09-2001 04:00

Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.CVE-1999-1214bsdbsd+324y ago09-03-2002 05:00

The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.CVE-1999-1102applea_ux+324y ago09-03-2002 05:00

lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.CVE-1999-1394bsdbsd25y ago12-09-2001 04:00

BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.