Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: FreeBSD p3, p5, p9 Clear all filters
TI-2024-07034 CVE-2024-7589 · GHSA-j7jm-6q5x-ffr4

OpenSSH pre-authentication async signal safety issue

Priority MEDIUM 41

A signal handler in sshd(8) may call a logging function that is not async-signal-safe.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02038 Published 2024-08-11 Fixed in p3, p9 +1 CWE-364
TI-2024-06266 CVE-2024-6759 · GHSA-96rc-h8f4-67gc

NFS client accepts file names containing path separators

Priority LOW 31

When mounting a remote filesystem using NFS, the kernel did not sanitize remotely provided filenames for the path separator character, "/".

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00676 Published 2024-08-11 Fixed in p3, p9 +1 CWE-22
TI-2024-06267 CVE-2024-6760 · GHSA-2mcp-f38w-p5gf

ktrace(2) fails to detach when executing a setuid binary

Priority LOW 34

A logic bug in the code which disables kernel tracing for setuid programs meant that tracing was not disabled when it should have, allowing unprivileged users to trace and inspect the behavior of setuid programs.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00741 Published 2024-08-11 Fixed in p3, p9 +1 CWE-862