Approved changes feed: RSS · Atom

cpe:2.3:o:freebsd:freebsd:2.2.7:*:*:*:*:*:*:*

part: o version: 2.2.7 update: *

VendorFreebsd (1e86ea60-a74f-5f45-ac35-3eb819c9e064)
ProductFreebsd (be9b20ed-2a20-5a94-a224-b1a6fdcacb17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freebsd/freebsd-src purl2cpe 2026-06-01 10:12:45.212586

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6834 vulnerable 2026-06-08 05:05:07.108249 Details available
The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6833 vulnerable 2026-06-08 05:05:07.106318 Details available
The qls_eioctl function in sys/dev/qlxge/qls_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6832 vulnerable 2026-06-08 05:05:07.075813 Details available
The nand_ioctl function in sys/dev/nand/nand_geom.c in the nand driver in the kernel in FreeBSD 10 and earlier does not properly initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call.
Published: 2013-11-21T02:00:00.000Z
Updated: 2024-08-06T17:46:23.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2143 vulnerable 2026-06-08 05:00:52.992885 Details available
The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if this password contains a 0x80 character, which makes it easier for context-dependent attackers to obtain access via an authentication attempt with an initial substring of the intended password, as demonstrated by a Unicode password.
Published: 2012-07-05T14:00:00.000Z
Updated: 2024-08-06T19:26:08.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4609 vulnerable 2026-06-08 04:50:46.970191 Details available
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
Published: 2008-10-20T17:00:00.000Z
Updated: 2024-08-07T10:24:20.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1283 vulnerable 2026-06-08 04:48:56.798496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1234 vulnerable 2026-06-08 04:47:23.753829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0554 vulnerable 2026-06-08 04:45:20.480719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.