Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
FreeBSD Number Of NVD 488 CRITICAL 29 HIGH 219 MEDIUM 185 LOW 55
URL https://www.freebsd.org/
Explanation Starting with FreeBSD 11, we are switching to a model of supporting major versions for at least 5 years.
We plan to release updates to the major versions every two years.
Older versions will be supported until three months after a new minor version is released.
Tag
  • BSD
Add Information URL
No Type Name URL
1 https://www.freebsd.org/security/
2 https://www.freebsd.org/releases/
3 https://www.freebsd.org/security/unsupported.html
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
151 FreeBSD 15 15.1 June 16, 2026 June 16, 2026 March 31, 2027 March 31, 2027 0 0 0 0
152 FreeBSD 13 13.2 April 11, 2023 April 13, 2021 April 13, 2021 3 29 6 0
153 FreeBSD 12 12.4 Dec. 5, 2022 Dec. 11, 2018 June 30, 2024 18 39 22 2
154 FreeBSD 11 11.4 June 16, 2020 Oct. 10, 2016 Sept. 30, 2021 21 48 40 2
155 FreeBSD 10 10.4 Jan. 20, 2014 Jan. 20, 2014 Feb. 28, 2015 7 40 46 2
156 FreeBSD 9 9.3 July 16, 2014 Jan. 10, 2012 Dec. 31, 2016 5 38 33 6
157 FreeBSD 8 8.4 June 9, 2013 Nov. 25, 2009 Aug. 1, 2015 5 38 33 6
158 FreeBSD 7 7.4 Feb. 24, 2011 Feb. 27, 2008 Feb. 28, 2013 5 37 31 5
159 FreeBSD 6 6.4 Nov. 28, 2008 Nov. 4, 2005 Nov. 30, 2010 6 43 46 15
160 FreeBSD 5 5.5 May 25, 2006 Nov. 6, 2004 May 31, 2008 7 42 50 18
161 FreeBSD 4 4.0 March 14, 2000 Jan. 31, 2007 8 67 61 23
162 FreeBSD 3 3.0 Oct. 16, 1998 Jan. 1, 1900 6 57 47 16
163 FreeBSD 2 2.0.5 Nov. 22, 1994 Jan. 1, 1900 6 51 41 10
164 FreeBSD 1 1.0 Oct. 1, 1993 Jan. 1, 1900 26 112 90 9
165 FreeBSD 0.4_1 0.4_1 Jan. 1, 1900 6 27 30 4
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
151 9.8
7.5 		CRITICAL
Network 		Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by leveraging an ntpq query and sending a response with a crafted a… CWE-787
 Out-of-bounds Write 		CVE-2018-7183 cpe:2.3:o:freebsd:freebsd:11.1:*
cpe:2.3:o:freebsd:freebsd:10.4:*
cpe:2.3:o:freebsd:freebsd:10.3:* 		2024-11-21 13:11
2018-03-9 		Show GitHub Exploit DB Packet Storm
152 6.5
4.0 		MEDIUM
Network 		The routed daemon in FreeBSD 9.3 before 9.3-RELEASE-p22, 10.2-RC2 before 10.2-RC2-p1, 10.2-RC1 before 10.2-RC1-p2, 10.2 before 10.2-BETA2-p3, and 10.1 before 10.1-RELEASE-p17 allows remote authentica… CWE-20
 Improper Input Validation  		CVE-2015-5674 cpe:2.3:o:freebsd:freebsd:9.3:*
cpe:2.3:o:freebsd:freebsd:10.2:*
cpe:2.3:o:freebsd:freebsd:10.1:* 		2024-11-21 11:33
2018-02-6 		Show GitHub Exploit DB Packet Storm
153 7.8
9.3 		HIGH
Local 		The do_ed_script function in pch.c in GNU patch through 2.7.6, and patch in FreeBSD 10.1 before 10.1-RELEASE-p17, 10.2 before 10.2-BETA2-p3, 10.2-RC1 before 10.2-RC1-p2, and 0.2-RC2 before 10.2-RC2-p… CWE-200
Information Exposure 		CVE-2015-1418 cpe:2.3:o:freebsd:freebsd:10.2:*
cpe:2.3:o:freebsd:freebsd:10.1:* 		2024-11-21 11:25
2018-02-6 		Show GitHub Exploit DB Packet Storm
154 7.8
9.3 		HIGH
Local 		Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-1416 cpe:2.3:o:freebsd:freebsd:10.2:*
cpe:2.3:o:freebsd:freebsd:10.1:*
cpe:2.3:o:freebsd:freebsd:10.0:* 		2024-11-21 11:25
2018-02-6 		Show GitHub Exploit DB Packet Storm
155 3.3
2.1 		LOW
Local 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not properly clear the memory of the kld_file_stat structure befo… CWE-200
Information Exposure 		CVE-2017-1088 cpe:2.3:o:freebsd:freebsd:-:* 2024-11-21 12:21
2017-11-17 		Show GitHub Exploit DB Packet Storm
156 7.8
4.6 		HIGH
Local 		In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one jail can read and modify the content of POSIX shared memory… CWE-22
Path Traversal 		CVE-2017-1087 cpe:2.3:o:freebsd:freebsd:-:* 2024-11-21 12:21
2017-11-17 		Show GitHub Exploit DB Packet Storm
157 3.3
2.1 		LOW
Local 		In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any… CWE-200
Information Exposure 		CVE-2017-1086 cpe:2.3:o:freebsd:freebsd:-:* 2024-11-21 12:21
2017-11-17 		Show GitHub Exploit DB Packet Storm
158 5.3
2.9 		MEDIUM
Adjacent 		Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sleep Mode Response fra… CWE-330
 Use of Insufficiently Random Values 		CVE-2017-13088 cpe:2.3:o:freebsd:freebsd:11:*
cpe:2.3:o:freebsd:freebsd:11.1:*
cpe:2.3:o:freebsd:freebsd:10:*
cpe:2.3:o:freeb… 		2024-11-21 12:10
2017-10-17 		Show GitHub Exploit DB Packet Storm
159 5.3
2.9 		MEDIUM
Adjacent 		Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management (WNM) Sleep Mode Response frame, allowin… CWE-330
 Use of Insufficiently Random Values 		CVE-2017-13087 cpe:2.3:o:freebsd:freebsd:11:*
cpe:2.3:o:freebsd:freebsd:11.1:*
cpe:2.3:o:freebsd:freebsd:10:*
cpe:2.3:o:freeb… 		2024-11-21 12:10
2017-10-17 		Show GitHub Exploit DB Packet Storm
160 6.8
5.4 		MEDIUM
Adjacent 		Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio range to replay, decry… CWE-330
 Use of Insufficiently Random Values 		CVE-2017-13086 cpe:2.3:o:freebsd:freebsd:11:*
cpe:2.3:o:freebsd:freebsd:11.1:*
cpe:2.3:o:freebsd:freebsd:10:*
cpe:2.3:o:freeb… 		2024-11-21 12:10
2017-10-17 		Show GitHub Exploit DB Packet Storm