bsd vulnerabilities

Products

• bsd 8
• libc library 1
• lpr 1
• mailx 1
• nvi 1

Latest bsd CVEs

Newest publication first

1. CVE-2014-7844 BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

   Published 2020-01-14

   High·CVSS 7.8 EPSS 1.6%

   BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via a crafted email address.

2. CVE-2016-6559 The BSD libc library's link_ntoa() function may be vulnerable to a classic buffer overflow

   Published 2018-07-13

   Critical·CVSS 9.8 EPSS 3.7%

   Improper bounds checking of the obuf variable in the link_ntoa() function in linkaddr.c of the BSD libc library may allow an attacker to read or write from memory. The full impact and severity depends on the method of exploit and how the library is used by applications. According...

3. CVE-2014-7250 The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of....

   Published 2014-12-12

   Medium·CVSS 5.0 EPSS 7.1%

   The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers to cause a denial of service (resource consumption) via crafted packets.

4. CVE-2008-4609 The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of servi...

   Published 2008-10-20

   High·CVSS 7.1 EPSS 32.4%

   The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate informatio...

5. CVE-2001-1562 Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.

   Published 2005-07-14

   High·CVSS 7.2 EPSS 0.40%

   Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.

6. CVE-2003-0144 Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via lon...

   Published 2003-03-14

   High·CVSS 7.2 EPSS 1.9% Public exploit

   Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.

7. CVE-2001-0670 Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to...

   Published 2002-03-09

   High·CVSS 7.5 EPSS 6.6%

   Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.

8. CVE-1999-1102 lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000....

   Published 2002-03-09

   Low·CVSS 2.1 EPSS 0.43%

   lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered after invoking lpr 1000 times.

9. CVE-1999-1214 The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain i...

   Published 2002-03-09

   Low·CVSS 2.1 EPSS 0.30%

   The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.

10. CVE-1999-1098 Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.

    Published 2002-03-09

    Medium·CVSS 5.0 EPSS 1.4%

    Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing.

11. CVE-1999-1471 Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.

    Published 2001-09-12

    High·CVSS 7.2 EPSS 0.50%

    Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field.

12. CVE-1999-1394 BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system edit...

    Published 2001-09-12

    Low·CVSS 2.1 EPSS 0.61%

    BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and using a file system editor such as fsdb to directly modify the file through a device.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.