Known Vulnerabilities for products from FreeBSD

Listed below are 20 of the newest known vulnerabilities associated with the vendor "FreeBSD".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-35362 json Not Provided 2026-04-22 2026-04-22
CVE-2026-34578 json Not Provided 2026-04-09 2026-04-09
CVE-2026-4748 json A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only... Not Provided 2026-04-01 2026-04-02
CVE-2026-4747 json Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion ... Not Provided 2026-03-26 2026-04-20
CVE-2023-51765 json 5.3 - MEDIUM 2023-12-24 2024-01-05
CVE-2023-49298 json 7.5 - HIGH 2023-11-24 2024-03-18
CVE-2023-48795 json 5.9 - MEDIUM 2023-12-18 2024-03-13
CVE-2023-5978 json In versions of FreeBSD 13-RELEASE before 13-RELEASE-p5, under certain circumstances the cap_net libcasper(3) service incorrec... 7.5 - HIGH 2023-11-08 2023-11-16
CVE-2023-5941 json In versions of FreeBSD 12.4-RELEASE prior to 12.4-RELEASE-p7 and FreeBSD 13.2-RELEASE prior to 13.2-RELEASE-p5 the __sflush()... 9.8 - CRITICAL 2023-11-08 2023-11-16
CVE-2023-5370 json On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculat... 5.5 - MEDIUM 2023-10-04 2023-10-10
CVE-2023-5369 json Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input an... 7.1 - HIGH 2023-10-04 2023-10-10
CVE-2023-5368 json On an msdosfs filesystem, the 'truncate' or 'ftruncate' system calls under certain circumstances populate the additional spac... 6.5 - MEDIUM 2023-10-04 2023-10-05
CVE-2023-4809 json In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be ... 7.5 - HIGH 2023-09-06 2023-09-12
CVE-2023-3494 json The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interfa... 8.8 - HIGH 2023-08-01 2023-08-31
CVE-2023-3326 json pam_krb5 authenticates a user by essentially running kinit with the password, getting a ticket-granting ticket (tgt) from the... 9.8 - CRITICAL 2023-06-22 2023-08-01
CVE-2023-3107 json A set of carefully crafted ipv6 packets can trigger an integer overflow in the calculation of a fragment reassembled packet's... 7.5 - HIGH 2023-08-01 2023-08-07
CVE-2023-0751 json When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resul... 6.5 - MEDIUM 2023-02-08 2023-11-07
CVE-2022-32264 json ** UNSUPPORTED WHEN ASSIGNED ** sys/netinet/tcp_timer.h in FreeBSD before 7.0 contains a denial-of-service (DoS) vulnerabilit... 7.5 - HIGH 2022-09-06 2023-11-07
CVE-2022-27674 json Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentia... 7.5 - HIGH 2022-11-09 2023-11-07
CVE-2022-23831 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-11-09 2023-11-07

Known software with vulnerabilities from FreeBSD

Type Vendor Product Version
ApplicationFreebsdAide-
ApplicationFreebsdCvsweb2.0.4
ApplicationFreebsdFetch-
Operating
System
FreebsdFreebsd-
ApplicationFreebsdFreebsd10.0
ApplicationFreebsdHeimdal-
ApplicationFreebsdJa-xklock-
ApplicationFreebsdLibarchive-
ApplicationFreebsdName Server Daemon-
ApplicationFreebsdSlashem-tty-