# cve.now: Freebsd

The newest entries naming Freebsd as an affected vendor (up to 200), of 165 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-101311](https://cve.now/CVE-2026-101311.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0)
- [CVE-2026-101310](https://cve.now/CVE-2026-101310.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0)
- [CVE-2026-101309](https://cve.now/CVE-2026-101309.md): Multiple vulnerabilities in bhyve device models (CVSS 7.0)
- [CVE-2026-101308](https://cve.now/CVE-2026-101308.md): TOCTOU race between sound(4) buffer resizing and mmap (CVSS 5.5)
- [CVE-2026-101307](https://cve.now/CVE-2026-101307.md): Remotely triggerable buffer overflow in tcp\_rack (CVSS 8.2)
- [CVE-2026-101303](https://cve.now/CVE-2026-101303.md): IPv6 UDP sendto(2) bypasses jail loopback restriction (CVSS 7.5)
- [CVE-2026-101302](https://cve.now/CVE-2026-101302.md): Remote DoS via receive-side kernel TLS (CVSS 6.5)
- [CVE-2026-101306](https://cve.now/CVE-2026-101306.md): Multiple jail filesystem root escapes (CVSS 9.8)
- [CVE-2026-101305](https://cve.now/CVE-2026-101305.md): Multiple jail filesystem root escapes (CVSS 8.8)
- [CVE-2026-101304](https://cve.now/CVE-2026-101304.md): Multiple jail filesystem root escapes (CVSS 7.1)
- [CVE-2026-58100](https://cve.now/CVE-2026-58100.md): Memory safety bugs in kqueue copy-on-fork implementation (CVSS 7.0)
- [CVE-2026-58099](https://cve.now/CVE-2026-58099.md): Memory safety bugs in kqueue copy-on-fork implementation (CVSS 7.0)
- [CVE-2026-58098](https://cve.now/CVE-2026-58098.md): Heap out-of-bounds access in semop(2) (CVSS 8.4)
- [CVE-2026-58094](https://cve.now/CVE-2026-58094.md): TOCTOU race in POSIX shared memory large page configuration (CVSS 7.8)
- [CVE-2026-58093](https://cve.now/CVE-2026-58093.md): Kernel use-after-free via tty ioctls (CVSS 7.0)
- [CVE-2026-58097](https://cve.now/CVE-2026-58097.md): ppp(8): missing length validation in mp\_SetEnddisc() (CVSS 7.8)
- [CVE-2026-58096](https://cve.now/CVE-2026-58096.md): ppp(8): missing length validation in LcpDecodeConfig() (CVSS 8.8)
- [CVE-2026-58095](https://cve.now/CVE-2026-58095.md): ppp(8): incorrect length calculation in mp\_Enddisc() (CVSS 8.8)
- [CVE-2026-58092](https://cve.now/CVE-2026-58092.md): Unauthorized credential switching (CVSS 8.1)
- [CVE-2026-58091](https://cve.now/CVE-2026-58091.md): Kernel use-after-free via the SNDCTL\_DSP\_SYNCSTART ioctl (CVSS 7.8)
- [CVE-2026-58090](https://cve.now/CVE-2026-58090.md): Use-after-free in unix SOCK\_STREAM message handling (CVSS 7.8)
- [CVE-2026-58089](https://cve.now/CVE-2026-58089.md): hwpmc fails to detach PMCs during exec credential transitions (CVSS 7.8)
- [CVE-2026-58088](https://cve.now/CVE-2026-58088.md): Race condition in ELF core dump segment counting (CVSS 7.4)
- [CVE-2026-58087](https://cve.now/CVE-2026-58087.md): Heap out-of-bounds access in semctl(2) (CVSS 7.8)
- [CVE-2026-58086](https://cve.now/CVE-2026-58086.md): ktrace(2) privilege incorrectly validated in jails (CVSS 8.1)
- [CVE-2026-58085](https://cve.now/CVE-2026-58085.md): Missing MAC validation in wg(4) packet decryption (CVSS 7.5)
- [CVE-2026-58084](https://cve.now/CVE-2026-58084.md): Kernel stack disclosure via timer\_settime(2) (CVSS 5.5)
- [CVE-2026-58083](https://cve.now/CVE-2026-58083.md): Use-after-free in kqueue copy-on-fork (CVSS 8.4)
- [CVE-2026-58082](https://cve.now/CVE-2026-58082.md): Stack based buffer overflow in iconv(3) (CVSS 9.8)
- [CVE-2026-58081](https://cve.now/CVE-2026-58081.md): Heap based buffer overflow in iconv(3) (CVSS 9.8)
- [CVE-2026-49425](https://cve.now/CVE-2026-49425.md): Kernel stack disclosure in 32-bit compatibility support (CVSS 5.5)
- [CVE-2026-49424](https://cve.now/CVE-2026-49424.md): Kernel stack disclosure in Linux compatibility layer (CVSS 5.5)
- [CVE-2026-49423](https://cve.now/CVE-2026-49423.md): Remote DOS via uninitialized memory access in KTLS receive (CVSS 3.3)
- [CVE-2026-49426](https://cve.now/CVE-2026-49426.md): Incorrect audit records for ptrace(2) syscall requests (CVSS 3.3)
- [CVE-2026-49428](https://cve.now/CVE-2026-49428.md): posixshm: system calls can incorrectly free memory of largepage objects (CVSS 8.4)
- [CVE-2026-49427](https://cve.now/CVE-2026-49427.md): posixshm: largepage shared memory objects not explicitly wired (CVSS 8.8)
- [CVE-2026-49422](https://cve.now/CVE-2026-49422.md): Use-after-free in TCP RACK stack option handler (CVSS 8.4)
- [CVE-2026-49421](https://cve.now/CVE-2026-49421.md): unlinkat(2) ignores AT\_RESOLVE\_BENEATH flag (CVSS 7.1)
- [CVE-2026-49420](https://cve.now/CVE-2026-49420.md): Buffer overflow in libalias RTSP handler (CVSS 8.8)
- [CVE-2026-49431](https://cve.now/CVE-2026-49431.md): Incorrect user validation in ZFS\_IOC\_SET\_PROP ioctl (CVSS 3.3)
- [CVE-2026-49430](https://cve.now/CVE-2026-49430.md): Kernel heap overflow in ZFS\_IOC\_RECV\_NEW ioctl (CVSS 7.8)
- [CVE-2026-49429](https://cve.now/CVE-2026-49429.md): Kernel heap overflow in ZFS\_IOC\_USERSPACE\_MANY ioctl (CVSS 7.8)
- [CVE-2026-49415](https://cve.now/CVE-2026-49415.md): Local privilege escalation via execve(2) TOCTOU race (CVSS 8.8)
- [CVE-2026-49419](https://cve.now/CVE-2026-49419.md): Jail reference count underflow (CVSS 8.8)
- [CVE-2026-49418](https://cve.now/CVE-2026-49418.md): Use-after-free in device pager page list (CVSS 8.8)
- [CVE-2026-49416](https://cve.now/CVE-2026-49416.md): Integer overflow in vt(4) CONS\_HISTORY ioctl (CVSS 7.8)
- [CVE-2026-49414](https://cve.now/CVE-2026-49414.md): ASLR bypass for setuid executables via procctl(2) (CVSS 7.8)
- [CVE-2026-49413](https://cve.now/CVE-2026-49413.md): Flaw in Linuxulator execution of setugid binaries (CVSS 7.1)
- [CVE-2026-49412](https://cve.now/CVE-2026-49412.md): Use-after-free bug in the IPV6\_MSFILTER socket option handler (CVSS 7.8)
- [CVE-2026-45259](https://cve.now/CVE-2026-45259.md): sigqueue(2) missing capability mode restriction (CVSS 6.5)
- [CVE-2026-45258](https://cve.now/CVE-2026-45258.md): Multiple vulnerabilities in the sound(4) mmap path (CVSS 7.8)
- [CVE-2026-49417](https://cve.now/CVE-2026-49417.md): Multiple vulnerabilities in the sound(4) mmap path (CVSS 7.0)
- [CVE-2026-45257](https://cve.now/CVE-2026-45257.md): Arbitrary file overwrite via the KTLS receive path (CVSS 7.8)
- [CVE-2026-45256](https://cve.now/CVE-2026-45256.md): Missing permission check in thr\_kill2(2) (CVSS 5.5)
- [CVE-2026-45254](https://cve.now/CVE-2026-45254.md): Incorrect libcap\_net limitation list manipulation (CVSS 6.5)
- [CVE-2026-45255](https://cve.now/CVE-2026-45255.md): Remote code execution via installer Wi-Fi access point scans (CVSS 7.5)
- [CVE-2026-39461](https://cve.now/CVE-2026-39461.md): select(2) file descriptor set overflow causes stack overflow (CVSS 8.8)
- [CVE-2026-45253](https://cve.now/CVE-2026-45253.md): Missing validation in ptrace(PT\_SC\_REMOTE) (CVSS 8.4)
- [CVE-2026-45252](https://cve.now/CVE-2026-45252.md): Heap overflow in FUSE\_LISTXATTR (CVSS 5.5)
- [CVE-2026-45251](https://cve.now/CVE-2026-45251.md): Kernel use-after-free via file descriptor syscalls (CVSS 7.8)
- [CVE-2026-45250](https://cve.now/CVE-2026-45250.md): Stack buffer overflow via setcred(2) (CVSS 7.8)
- [CVE-2026-35547](https://cve.now/CVE-2026-35547.md): Heap overflow in libnv (CVSS 8.1)
- [CVE-2026-39457](https://cve.now/CVE-2026-39457.md): Stack overflow via select() file descriptor set overflow (CVSS 7.8)
- [CVE-2026-42512](https://cve.now/CVE-2026-42512.md): Remotely triggerable out-of-bounds heap write in dhclient (CVSS 8.1)
- [CVE-2026-7164](https://cve.now/CVE-2026-7164.md): pf can overflow the stack parsing crafted SCTP packets (CVSS 7.5)
- [CVE-2026-7270](https://cve.now/CVE-2026-7270.md): Local privilege escalation via execve() (CVSS 7.8)
- [CVE-2026-42511](https://cve.now/CVE-2026-42511.md): Remote code execution via malicious DHCP options (CVSS 8.1)
- [CVE-2026-6386](https://cve.now/CVE-2026-6386.md): Missing large page handling in pmap\_pkru\_update\_range() (CVSS 6.2)
- [CVE-2026-5398](https://cve.now/CVE-2026-5398.md): Kernel use-after-free bug in the TIOCNOTTY handler (CVSS 8.4)
- [CVE-2026-4748](https://cve.now/CVE-2026-4748.md): pf silently ignores certain rules (CVSS 7.5)
- [CVE-2026-4747](https://cve.now/CVE-2026-4747.md): Remote code execution via RPCSEC\_GSS packet validation (CVSS 8.8)
- [CVE-2026-4652](https://cve.now/CVE-2026-4652.md): Remote denial of service via null pointer dereference (CVSS 7.5)
- [CVE-2026-4247](https://cve.now/CVE-2026-4247.md): TCP: remotely exploitable DoS vector (mbuf leak) (CVSS 7.5)
- [CVE-2026-3038](https://cve.now/CVE-2026-3038.md): Local DoS and possible privilege escalation via routing sockets (CVSS 7.5)
- [CVE-2026-2261](https://cve.now/CVE-2026-2261.md): blocklistd(8) socket leak (CVSS 7.5)
- [CVE-2025-15576](https://cve.now/CVE-2025-15576.md): Jail chroot escape via fd exchange with a different jail (CVSS 7.5)
- [CVE-2025-15547](https://cve.now/CVE-2025-15547.md): Jail escape by a privileged user via nullfs (CVSS 8.8)
- [CVE-2025-14769](https://cve.now/CVE-2025-14769.md): ipfw denial of service (CVSS 7.5)
- [CVE-2025-14558](https://cve.now/CVE-2025-14558.md): Remote code execution via ND6 Router Advertisements (CVSS 7.2)
- [CVE-2025-24934](https://cve.now/CVE-2025-24934.md): SO\_REUSEPORT\_LB breaks connect(2) for UDP sockets (CVSS 5.4)
- [CVE-2025-0662](https://cve.now/CVE-2025-0662.md): Uninitialized kernel memory disclosure via ktrace(2) (CVSS 4.9)
- [CVE-2025-0374](https://cve.now/CVE-2025-0374.md): Unprivileged access to system files (CVSS 6.5)
- [CVE-2025-0373](https://cve.now/CVE-2025-0373.md): Buffer overflow in some filesystems via NFS (CVSS 6.0)
- [CVE-2024-45289](https://cve.now/CVE-2024-45289.md): Unbounded allocation in ctl(4) CAM Target Layer (CVSS 7.5)
- [CVE-2024-39281](https://cve.now/CVE-2024-39281.md): Unbounded allocation in ctl(4) CAM Target Layer (CVSS 5.3)
- [CVE-2024-51566](https://cve.now/CVE-2024-51566.md): bhyve(8) NVMe driver to guest-induced infinite loops. (CVSS 6.5)
- [CVE-2024-51565](https://cve.now/CVE-2024-51565.md): bhyve(8) hda driver buffer over-read (CVSS 6.5)
- [CVE-2024-51564](https://cve.now/CVE-2024-51564.md): bhyve(8) infinite loop in the hda audio driver (CVSS 7.5)
- [CVE-2024-51563](https://cve.now/CVE-2024-51563.md): bhyve(8) virtio\_vq\_recordon time-of-check to time-of-use race (CVSS 6.5)
- [CVE-2024-51562](https://cve.now/CVE-2024-51562.md): bhyve(8) nvme\_opc\_get\_log\_page buffer over-read (CVSS 6.5)
- [CVE-2024-41721](https://cve.now/CVE-2024-41721.md): bhyve(8) out-of-bounds read access via XHCI emulation (CVSS 8.1)
- [CVE-2024-43102](https://cve.now/CVE-2024-43102.md): umtx Kernel panic or Use-After-Free (CVSS 9.8)
- [CVE-2024-32668](https://cve.now/CVE-2024-32668.md): bhyve(8) privileged guest escape via USB controller (CVSS 8.2)
- [CVE-2024-45063](https://cve.now/CVE-2024-45063.md): Multiple issues in ctl(4) CAM Target Layer (CVSS 9.8)
- [CVE-2024-43110](https://cve.now/CVE-2024-43110.md): Multiple issues in ctl(4) CAM Target Layer (CVSS 8.4)
- [CVE-2024-42416](https://cve.now/CVE-2024-42416.md): Multiple issues in ctl(4) CAM Target Layer (CVSS 8.4)
- [CVE-2024-8178](https://cve.now/CVE-2024-8178.md): Multiple issues in ctl(4) CAM Target Layer (CVSS 9.3)
- [CVE-2024-41928](https://cve.now/CVE-2024-41928.md): bhyve(8) privileged guest escape via TPM device passthrough (CVSS 8.4)
- [CVE-2024-45288](https://cve.now/CVE-2024-45288.md): Multiple vulnerabilities in libnv (CVSS 8.4)
- [CVE-2024-45287](https://cve.now/CVE-2024-45287.md): Multiple vulnerabilities in libnv (CVSS 9.1)
- [CVE-2024-7589](https://cve.now/CVE-2024-7589.md): OpenSSH pre-authentication async signal safety issue (CVSS 8.1)
- [CVE-2024-6759](https://cve.now/CVE-2024-6759.md): NFS client accepts file names containing path separators (CVSS 5.3)
- [CVE-2024-6760](https://cve.now/CVE-2024-6760.md): ktrace(2) fails to detach when executing a setuid binary (CVSS 7.5)
- [CVE-2024-6640](https://cve.now/CVE-2024-6640.md): pf incorrectly matches different ICMPv6 states in the state table (CVSS 6.3)
- [CVE-2022-23093](https://cve.now/CVE-2022-23093.md): Stack overflow in ping(8) (CVSS 6.5)
- [CVE-2022-23092](https://cve.now/CVE-2022-23092.md): Missing bounds check in 9p message handling (CVSS 8.8)
- [CVE-2022-23091](https://cve.now/CVE-2022-23091.md): Memory disclosure by stale virtual memory mapping (CVSS 4.0)
- [CVE-2022-23090](https://cve.now/CVE-2022-23090.md): AIO credential reference count leak (CVSS 7.7)
- [CVE-2022-23089](https://cve.now/CVE-2022-23089.md): Out of bound read in elf\_note\_prpsinfo() (CVSS 4.7)
- [CVE-2022-23088](https://cve.now/CVE-2022-23088.md): 802.11 heap buffer overflow (CVSS 9.8)
- [CVE-2022-23087](https://cve.now/CVE-2022-23087.md): Bhyve e82545 device emulation out-of-bounds write (CVSS 8.8)
- [CVE-2022-23086](https://cve.now/CVE-2022-23086.md): mpr/mps/mpt driver ioctl heap out-of-bounds write (CVSS 9.8)
- [CVE-2022-23085](https://cve.now/CVE-2022-23085.md): Potential jail escape vulnerabilities in netmap (CVSS 9.8)
- [CVE-2022-23084](https://cve.now/CVE-2022-23084.md): Potential jail escape vulnerabilities in netmap (CVSS 7.8)
- [CVE-2024-25941](https://cve.now/CVE-2024-25941.md): jail(2) information leak (CVSS 3.3)
- [CVE-2024-25940](https://cve.now/CVE-2024-25940.md): bhyveload(8) host file access (CVSS 6.3)
- [CVE-2023-6660](https://cve.now/CVE-2023-6660.md): NFS client data corruption and kernel memory disclosure (no CVSS)
- [CVE-2023-6534](https://cve.now/CVE-2023-6534.md): TCP spoofing vulnerability in pf(4) (no CVSS)
- [CVE-2023-5978](https://cve.now/CVE-2023-5978.md): Incorrect libcap\_net limitation list manipulation (no CVSS)
- [CVE-2023-5941](https://cve.now/CVE-2023-5941.md): libc stdio buffer overflow (no CVSS)
- [CVE-2023-5370](https://cve.now/CVE-2023-5370.md): arm64 boot CPUs may lack speculative execution protections (no CVSS)
- [CVE-2023-5369](https://cve.now/CVE-2023-5369.md): copy\_file\_range insufficient capability rights check (no CVSS)
- [CVE-2023-5368](https://cve.now/CVE-2023-5368.md): msdosfs data disclosure (no CVSS)
- [CVE-2023-4809](https://cve.now/CVE-2023-4809.md): pf incorrectly handles multiple IPv6 fragment headers (no CVSS)
- [CVE-2023-3494](https://cve.now/CVE-2023-3494.md): bhyve privileged guest escape via fwctl (no CVSS)
- [CVE-2023-3107](https://cve.now/CVE-2023-3107.md): Remote denial of service in IPv6 fragment reassembly (CVSS 7.5)
- [CVE-2023-3326](https://cve.now/CVE-2023-3326.md): Network authentication attack via pam\_krb5 (no CVSS)
- [CVE-2023-0751](https://cve.now/CVE-2023-0751.md): GELI silently omits the keyfile if read from stdin (CVSS 6.5)
- [CVE-2012-4576](https://cve.now/CVE-2012-4576.md): FreeBSD: Input Validation Flaw allows local users to gain elevated privileges (no CVSS)
- [CVE-2019-5606](https://cve.now/CVE-2019-5606.md): In FreeBSD 12.0-STABLE before r349805, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r349806, 11.3-RELEASE before 11.3-RELEASE-p1, (no CVSS)
- [CVE-2019-5607](https://cve.now/CVE-2019-5607.md): In FreeBSD 12.0-STABLE before r350222, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350223, 11.3-RELEASE before 11.3-RELEASE-p1, (no CVSS)
- [CVE-2019-5604](https://cve.now/CVE-2019-5604.md): In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, (no CVSS)
- [CVE-2019-5603](https://cve.now/CVE-2019-5603.md): In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, (no CVSS)
- [CVE-2019-5605](https://cve.now/CVE-2019-5605.md): In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient in (no CVSS)
- [CVE-2019-5602](https://cve.now/CVE-2019-5602.md): In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, and (no CVSS)
- [CVE-2019-5601](https://cve.now/CVE-2019-5601.md): In FreeBSD 12.0-STABLE before r347474, 12.0-RELEASE before 12.0-RELEASE-p7, 11.2-STABLE before r347475, and 11.2-RELEASE before 11.2-RELEASE (no CVSS)
- [CVE-2019-5600](https://cve.now/CVE-2019-5600.md): In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, and (no CVSS)
- [CVE-2019-5596](https://cve.now/CVE-2019-5596.md): In FreeBSD 11.2-STABLE after r338618 and before r343786, 12.0-STABLE before r343781, and 12.0-RELEASE before 12.0-RELEASE-p3, a bug in the r (no CVSS)
- [CVE-2019-5595](https://cve.now/CVE-2019-5595.md): In FreeBSD before 11.2-STABLE(r343782), 11.2-RELEASE-p9, 12.0-STABLE(r343781), and 12.0-RELEASE-p3, kernel callee-save registers are not pro (no CVSS)
- [CVE-2018-17161](https://cve.now/CVE-2018-17161.md): In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-provi (no CVSS)
- [CVE-2018-17160](https://cve.now/CVE-2018-17160.md): In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can p (no CVSS)
- [CVE-2018-17159](https://cve.now/CVE-2018-17159.md): In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. (no CVSS)
- [CVE-2018-17158](https://cve.now/CVE-2018-17158.md): In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length fiel (no CVSS)
- [CVE-2018-17157](https://cve.now/CVE-2018-17157.md): In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by s (no CVSS)
- [CVE-2018-17156](https://cve.now/CVE-2018-17156.md): In FreeBSD before 11.2-STABLE(r340268) and 11.2-RELEASE-p5, due to incorrectly accounting for padding on 64-bit platforms, a buffer underwri (no CVSS)
- [CVE-2018-6925](https://cve.now/CVE-2018-6925.md): In FreeBSD before 11.2-STABLE(r338986), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338985), and 10.4-RELEASE-p13, due to improper maint (no CVSS)
- [CVE-2018-17155](https://cve.now/CVE-2018-17155.md): In FreeBSD before 11.2-STABLE(r338983), 11.2-RELEASE-p4, 11.1-RELEASE-p15, 10.4-STABLE(r338984), and 10.4-RELEASE-p13, due to insufficient i (no CVSS)
- [CVE-2018-17154](https://cve.now/CVE-2018-17154.md): In FreeBSD before 11.2-STABLE(r338987), 11.2-RELEASE-p4, and 11.1-RELEASE-p15, due to insufficient memory checking in the freebsd4\_getfsstat (no CVSS)
- [CVE-2018-6924](https://cve.now/CVE-2018-6924.md): In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF head (no CVSS)
- [CVE-2017-1085](https://cve.now/CVE-2017-1085.md): In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT\_STACK may turn a read-only memory region below the (no CVSS)
- [CVE-2017-1084](https://cve.now/CVE-2017-1084.md): In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard (no CVSS)
- [CVE-2017-1083](https://cve.now/CVE-2017-1083.md): In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. (no CVSS)
- [CVE-2017-1082](https://cve.now/CVE-2017-1082.md): In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pattern. (no CVSS)
- [CVE-2018-6923](https://cve.now/CVE-2018-6923.md): In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to ex (no CVSS)
- [CVE-2018-6922](https://cve.now/CVE-2018-6922.md): One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-p (no CVSS)
- [CVE-2018-6921](https://cve.now/CVE-2018-6921.md): In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network (no CVSS)
- [CVE-2018-6920](https://cve.now/CVE-2018-6920.md): In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of m (no CVSS)
- [CVE-2017-1081](https://cve.now/CVE-2017-1081.md): In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can (no CVSS)
- [CVE-2018-6919](https://cve.now/CVE-2018-6919.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of mem (no CVSS)
- [CVE-2018-6918](https://cve.now/CVE-2018-6918.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option head (no CVSS)
- [CVE-2018-6917](https://cve.now/CVE-2018-6917.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided (no CVSS)
- [CVE-2018-6916](https://cve.now/CVE-2018-6916.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IP (no CVSS)
- [CVE-2017-1088](https://cve.now/CVE-2017-1088.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not pr (no CVSS)
- [CVE-2017-1087](https://cve.now/CVE-2017-1087.md): In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one (no CVSS)
- [CVE-2017-1086](https://cve.now/CVE-2017-1086.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/freebsd
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.