FreeBSD 12.1 Patch 10
Approved changes feed: RSS · Atom
cpe:2.3:o:freebsd:freebsd:12.1:p10:*:*:*:*:*:*
part: o version: 12.1 update: p10
| Vendor | Freebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064) |
|---|---|
| Product | Freebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/freebsd/freebsd-src |
purl2cpe | 2026-06-01 10:12:45.165262 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7469 |
vulnerable | 2026-06-08 05:27:13.146491 |
Details available
In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.
Published: 2021-06-04T11:55:55.000Z
Updated: 2024-08-04T09:33:19.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25579 |
vulnerable | 2026-06-08 05:22:36.848603 |
Details available
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a pair of padding fields in the dirent structure, resulting in a leak of three uninitialized bytes.
Published: 2021-03-26T20:44:53.000Z
Updated: 2024-08-04T15:33:05.677Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25578 |
vulnerable | 2026-06-08 05:22:36.843721 |
Details available
In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file systems were not properly initializing the d_off field of the dirent structures returned by VOP_READDIR. In particular, tmpfs(5), smbfs(5), autofs(5) and mqueuefs(5) were failing to do so. As a result, eight uninitialized kernel stack bytes may be leaked to userspace by these file systems.
Published: 2021-03-26T20:44:43.000Z
Updated: 2024-08-04T15:33:05.687Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.