Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:1.1:*:*:*:*:*:*:*

part: o version: 1.1 update: *

VendorFreebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064)
ProductFreebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freebsd/freebsd-src purl2cpe 2026-06-01 10:12:45.149509

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6834 vulnerable 2026-06-08 05:05:07.107882 Details available
The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6833 vulnerable 2026-06-08 05:05:07.105687 Details available
The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6832 vulnerable 2026-06-08 05:05:07.062903 Details available
The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2143 vulnerable 2026-06-08 05:00:52.984125 Details available
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
Published: 2012-07-05T14:00:00.000Z
Updated: 2024-08-06T19:26:08.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4609 vulnerable 2026-06-08 04:50:46.959076 Details available
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Published: 2008-10-20T17:00:00.000Z
Updated: 2024-08-07T10:24:20.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1385 vulnerable 2026-06-08 04:44:58.295692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0345 vulnerable 2026-06-08 04:44:58.010400 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0017 vulnerable 2026-06-08 04:44:57.898967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0001 vulnerable 2026-06-08 04:44:57.882902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.