Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
FreeBSD Number Of NVD 488 CRITICAL 29 HIGH 219 MEDIUM 185 LOW 55
URL https://www.freebsd.org/
Explanation Starting with FreeBSD 11, we are switching to a model of supporting major versions for at least 5 years.
We plan to release updates to the major versions every two years.
Older versions will be supported until three months after a new minor version is released.
Tag
  • BSD
Add Information URL
No Type Name URL
1 https://www.freebsd.org/security/
2 https://www.freebsd.org/releases/
3 https://www.freebsd.org/security/unsupported.html
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
261 FreeBSD 15 15.1 June 16, 2026 June 16, 2026 March 31, 2027 March 31, 2027 0 0 0 0
262 FreeBSD 13 13.2 April 11, 2023 April 13, 2021 April 13, 2021 3 29 6 0
263 FreeBSD 12 12.4 Dec. 5, 2022 Dec. 11, 2018 June 30, 2024 18 39 22 2
264 FreeBSD 11 11.4 June 16, 2020 Oct. 10, 2016 Sept. 30, 2021 21 48 40 2
265 FreeBSD 10 10.4 Jan. 20, 2014 Jan. 20, 2014 Feb. 28, 2015 7 40 46 2
266 FreeBSD 9 9.3 July 16, 2014 Jan. 10, 2012 Dec. 31, 2016 5 38 33 6
267 FreeBSD 8 8.4 June 9, 2013 Nov. 25, 2009 Aug. 1, 2015 5 38 33 6
268 FreeBSD 7 7.4 Feb. 24, 2011 Feb. 27, 2008 Feb. 28, 2013 5 37 31 5
269 FreeBSD 6 6.4 Nov. 28, 2008 Nov. 4, 2005 Nov. 30, 2010 6 43 46 15
270 FreeBSD 5 5.5 May 25, 2006 Nov. 6, 2004 May 31, 2008 7 42 50 18
271 FreeBSD 4 4.0 March 14, 2000 Jan. 31, 2007 8 67 61 23
272 FreeBSD 3 3.0 Oct. 16, 1998 Jan. 1, 1900 6 57 47 16
273 FreeBSD 2 2.0.5 Nov. 22, 1994 Jan. 1, 1900 6 51 41 10
274 FreeBSD 1 1.0 Oct. 1, 1993 Jan. 1, 1900 26 112 90 9
275 FreeBSD 0.4_1 0.4_1 Jan. 1, 1900 6 27 30 4
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
261 -
4.9 		MEDIUM The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which allows local users to read the contents of write-only files. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0777 cpe:2.3:o:freebsd:freebsd:7.0:*
cpe:2.3:o:freebsd:freebsd:6.3:*
cpe:2.3:o:freebsd:freebsd:6.2:*
cpe:2.3:o:free… 		2026-04-23 09:35
2008-02-15 		Show GitHub Exploit DB Packet Storm
262 -
2.1 		LOW The ptsname function in FreeBSD 6.0 through 7.0-PRERELEASE does not properly verify that a certain portion of a device name is associated with a pty of a user who is calling the pt_chown function, wh… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0216 cpe:2.3:o:freebsd:freebsd:7.0:pre-release
cpe:2.3:o:freebsd:freebsd:7.0:current
cpe:2.3:o:freebsd:freebsd:7.0:* 		2026-04-23 09:35
2008-01-16 		Show GitHub Exploit DB Packet Storm
263 -
6.9 		MEDIUM The script program in FreeBSD 5.0 through 7.0-PRERELEASE invokes openpty, which creates a pseudo-terminal with world-readable and world-writable permissions when it is not run as root, which allows l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-0217 cpe:2.3:o:freebsd:freebsd:7.0:pre-release
cpe:2.3:o:freebsd:freebsd:7.0:*
cpe:2.3:o:freebsd:freebsd:6.2:*
cpe:… 		2026-04-23 09:35
2008-01-16 		Show GitHub Exploit DB Packet Storm
264 -
2.1 		LOW The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which… CWE-200
Information Exposure 		CVE-2007-6150 cpe:2.3:o:freebsd:freebsd:7.0:beta_4
cpe:2.3:o:freebsd:freebsd:6.3:*
cpe:2.3:o:freebsd:freebsd:6.2:*
cpe:2.3:o… 		2026-04-23 09:35
2007-11-30 		Show GitHub Exploit DB Packet Storm
265 9.8
6.8 		CRITICAL
Network 		Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return va… CWE-252
 Unchecked Return Value 		CVE-2007-3798 cpe:2.3:o:freebsd:freebsd:6.2:p6
cpe:2.3:o:freebsd:freebsd:6.2:p5
cpe:2.3:o:freebsd:freebsd:6.2:p4
cpe:2.3:o:f… 		5.0
6.0

5.5
6.1 		2026-04-23 09:35
2007-07-17 		Show GitHub Exploit DB Packet Storm
266 -
6.6 		MEDIUM The ufs_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and possibly corrupt other filesystems by mounting a crafted UNIX… CWE-399
 Resource Management Errors 		CVE-2007-0267 cpe:2.3:o:freebsd:freebsd:6.1:* 2026-04-23 09:35
2007-01-17 		Show GitHub Exploit DB Packet Storm
267 -
7.2 		HIGH Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that cause… CWE-189
Numeric Errors 		CVE-2007-0229 cpe:2.3:o:freebsd:freebsd:6.1:* 2026-04-23 09:35
2007-01-13 		Show GitHub Exploit DB Packet Storm
268 -
6.6 		MEDIUM The jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log/console.log during a jail start-up, or when file systems are mounted or unmounted, which allows local … NVD-CWE-Other
CVE-2007-0166 cpe:2.3:o:freebsd:freebsd:5.3:*
cpe:2.3:o:freebsd:freebsd:*:* 		6.2 2026-04-23 09:35
2007-01-12 		Show GitHub Exploit DB Packet Storm
269 -
4.4 		MEDIUM Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner … NVD-CWE-Other
CVE-2006-6397 cpe:2.3:o:freebsd:freebsd:6.2:stable 2026-04-23 09:35
2006-12-8 		Show GitHub Exploit DB Packet Storm
270 7.8
7.2 		HIGH
Local 		ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variab… NVD-CWE-Other
CVE-2006-6165 cpe:2.3:o:freebsd:freebsd:6.2:stable 2026-04-23 09:35
2006-11-29 		Show GitHub Exploit DB Packet Storm