FreeBSD

The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname. The environment variable name used by fetch(1) to pass the filename to the library was incorrect, in effect ignoring the option. Fetch would still connect to a host presenting a certificate included in the revocation file passed to the --crl option.

Published: 2024-11-12T15:06:08.435Z
Updated: 2025-01-10T13:06:48.187Z

Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.

Published: 2022-11-09T20:45:35.675Z
Updated: 2025-05-01T14:11:02.633Z

Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.

Published: 2022-11-09T20:45:40.420Z
Updated: 2025-05-01T14:09:12.498Z

The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode (i.e., not associated with a SSID) a malicious beacon frame may overwrite kernel memory, leading to remote code execution.

Published: 2024-02-15T05:03:38.536Z
Updated: 2025-04-24T15:15:14.536Z

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.

Published: 2020-08-27T18:03:21.000Z
Updated: 2024-08-04T15:19:09.332Z