Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
FreeBSD Number Of NVD 488 CRITICAL 29 HIGH 219 MEDIUM 185 LOW 55
URL https://www.freebsd.org/
Explanation Starting with FreeBSD 11, we are switching to a model of supporting major versions for at least 5 years.
We plan to release updates to the major versions every two years.
Older versions will be supported until three months after a new minor version is released.
Tag
  • BSD
Add Information URL
No Type Name URL
1 https://www.freebsd.org/security/
2 https://www.freebsd.org/releases/
3 https://www.freebsd.org/security/unsupported.html
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
141 FreeBSD 15 15.1 June 16, 2026 June 16, 2026 March 31, 2027 March 31, 2027 0 0 0 0
142 FreeBSD 13 13.2 April 11, 2023 April 13, 2021 April 13, 2021 3 29 6 0
143 FreeBSD 12 12.4 Dec. 5, 2022 Dec. 11, 2018 June 30, 2024 18 39 22 2
144 FreeBSD 11 11.4 June 16, 2020 Oct. 10, 2016 Sept. 30, 2021 21 48 40 2
145 FreeBSD 10 10.4 Jan. 20, 2014 Jan. 20, 2014 Feb. 28, 2015 7 40 46 2
146 FreeBSD 9 9.3 July 16, 2014 Jan. 10, 2012 Dec. 31, 2016 5 38 33 6
147 FreeBSD 8 8.4 June 9, 2013 Nov. 25, 2009 Aug. 1, 2015 5 38 33 6
148 FreeBSD 7 7.4 Feb. 24, 2011 Feb. 27, 2008 Feb. 28, 2013 5 37 31 5
149 FreeBSD 6 6.4 Nov. 28, 2008 Nov. 4, 2005 Nov. 30, 2010 6 43 46 15
150 FreeBSD 5 5.5 May 25, 2006 Nov. 6, 2004 May 31, 2008 7 42 50 18
151 FreeBSD 4 4.0 March 14, 2000 Jan. 31, 2007 8 67 61 23
152 FreeBSD 3 3.0 Oct. 16, 1998 Jan. 1, 1900 6 57 47 16
153 FreeBSD 2 2.0.5 Nov. 22, 1994 Jan. 1, 1900 6 51 41 10
154 FreeBSD 1 1.0 Oct. 1, 1993 Jan. 1, 1900 26 112 90 9
155 FreeBSD 0.4_1 0.4_1 Jan. 1, 1900 6 27 30 4
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
141 5.6
4.7 		MEDIUM
Local 		System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process through a speculat… CWE-200
Information Exposure 		CVE-2018-3665 cpe:2.3:o:freebsd:freebsd:11.2:*
cpe:2.3:o:freebsd:freebsd:11.1:*
cpe:2.3:o:freebsd:freebsd:11.0:* 		2024-11-21 13:05
2018-06-22 		Show GitHub Exploit DB Packet Storm
142 5.9
4.3 		MEDIUM
Network 		An exploitable denial of service vulnerability exists in the origin timestamp check functionality of ntpd 4.2.8p9. A specially crafted unauthenticated network packet can be used to reset the expected… CWE-20
 Improper Input Validation  		CVE-2016-9042 cpe:2.3:o:freebsd:freebsd:11.0:*
cpe:2.3:o:freebsd:freebsd:10.0:* 		2024-11-21 12:00
2018-06-5 		Show GitHub Exploit DB Packet Storm
143 5.5
2.1 		MEDIUM
Local 		In FreeBSD before 11.1-STABLE(r332066) and 11.1-RELEASE-p10, due to insufficient initialization of memory copied to userland in the network subsystem, small amounts of kernel memory may be disclosed … CWE-200
Information Exposure 		CVE-2018-6921 cpe:2.3:o:freebsd:freebsd:*:* 11.0 11.1 2024-11-21 13:11
2018-05-9 		Show GitHub Exploit DB Packet Storm
144 5.5
2.1 		MEDIUM
Local 		In FreeBSD before 11.1-STABLE(r332303), 11.1-RELEASE-p10, 10.4-STABLE(r332321), and 10.4-RELEASE-p9, due to insufficient initialization of memory copied to userland in the Linux subsystem and Atheros… CWE-200
Information Exposure 		CVE-2018-6920 cpe:2.3:o:freebsd:freebsd:*:* 11.0
10.0

11.1
10.4 		2024-11-21 13:11
2018-05-9 		Show GitHub Exploit DB Packet Storm
145 7.8
7.2 		HIGH
Local 		A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, result… CWE-362
Race Condition 		CVE-2018-8897 cpe:2.3:o:freebsd:freebsd:*:* 11.0 11.1 2024-11-21 13:14
2018-05-9 		Show GitHub Exploit DB Packet Storm
146 7.5
7.8 		HIGH
Network 		In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel panic when fed specially crafted packet frag… CWE-20
 Improper Input Validation  		CVE-2017-1081 cpe:2.3:o:freebsd:freebsd:11.0:p10
cpe:2.3:o:freebsd:freebsd:10.3:p19
cpe:2.3:o:freebsd:freebsd:10.3:*
cpe:2.3… 		11.0 2024-11-21 12:21
2018-04-10 		Show GitHub Exploit DB Packet Storm
147 7.5
5.0 		HIGH
Network 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, due to insufficient initialization of memory copied to userland, small amounts of kernel memory may … CWE-200
Information Exposure 		CVE-2018-6919 cpe:2.3:o:freebsd:freebsd:*:* 11.0
10.0

11.1
10.4 		2024-11-21 13:11
2018-04-4 		Show GitHub Exploit DB Packet Storm
148 7.5
7.8 		HIGH
Network 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option header does not count the size of the option header itself, cau… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2018-6918 cpe:2.3:o:freebsd:freebsd:*:* 11.0
10.0

11.1
10.4 		2024-11-21 13:11
2018-04-4 		Show GitHub Exploit DB Packet Storm
149 7.5
5.0 		HIGH
Network 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, insufficient validation of user-provided font parameters can result in an integer overflow, leading … CWE-190
 Integer Overflow or Wraparound 		CVE-2018-6917 cpe:2.3:o:freebsd:freebsd:*:* 11.0
10.0

11.1
10.4 		2024-11-21 13:11
2018-04-4 		Show GitHub Exploit DB Packet Storm
150 9.8
9.0 		CRITICAL
Network 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p7, 10.4-STABLE, 10.4-RELEASE-p7, and 10.3-RELEASE-p28, the kernel does not properly validate IPsec packets coming from a trusted host. Additionally, a use… CWE-416
 Use After Free 		CVE-2018-6916 cpe:2.3:o:freebsd:freebsd:10.4:p7
cpe:2.3:o:freebsd:freebsd:10.4:*
cpe:2.3:o:freebsd:freebsd:10.3:p28
cpe:2.3:… 		11.0 11.1 2024-11-21 13:11
2018-03-10 		Show GitHub Exploit DB Packet Storm