Software Detail

Software Informaton Top

Operating Systems

Software Detail

FreeBSD

Number Of NVD

488

CRITICAL

HIGH

219

MEDIUM

185

LOW

URL	https://www.freebsd.org/
Explanation	Starting with FreeBSD 11, we are switching to a model of supporting major versions for at least 5 years. We plan to release updates to the major versions every two years. Older versions will be supported until three months after a new minor version is released.
Tag	BSD

Add Information URL

No	Type	Name	URL
1			https://www.freebsd.org/security/
2			https://www.freebsd.org/releases/
3			https://www.freebsd.org/security/unsupported.html

List Of Product [ Click to show release history and vulnerability information ]

No	Name	Latest Version	Release date	Initial release	Normal Support	Security Support Service Pack Support	Critical	High	Medium	Low
321	FreeBSD 15	15.1	June 16, 2026	June 16, 2026	March 31, 2027	March 31, 2027	0	0	0	0
322	FreeBSD 13	13.2	April 11, 2023	April 13, 2021	April 13, 2021		3	29	6	0
323	FreeBSD 12	12.4	Dec. 5, 2022	Dec. 11, 2018	June 30, 2024		18	39	22	2
324	FreeBSD 11	11.4	June 16, 2020	Oct. 10, 2016	Sept. 30, 2021		21	48	40	2
325	FreeBSD 10	10.4	Jan. 20, 2014	Jan. 20, 2014	Feb. 28, 2015		7	40	46	2
326	FreeBSD 9	9.3	July 16, 2014	Jan. 10, 2012	Dec. 31, 2016		5	38	33	6
327	FreeBSD 8	8.4	June 9, 2013	Nov. 25, 2009	Aug. 1, 2015		5	38	33	6
328	FreeBSD 7	7.4	Feb. 24, 2011	Feb. 27, 2008	Feb. 28, 2013		5	37	31	5
329	FreeBSD 6	6.4	Nov. 28, 2008	Nov. 4, 2005	Nov. 30, 2010		6	43	46	15
330	FreeBSD 5	5.5	May 25, 2006	Nov. 6, 2004	May 31, 2008		7	42	50	18
331	FreeBSD 4	4.0		March 14, 2000	Jan. 31, 2007		8	67	61	23
332	FreeBSD 3	3.0		Oct. 16, 1998	Jan. 1, 1900		6	57	47	16
333	FreeBSD 2	2.0.5		Nov. 22, 1994	Jan. 1, 1900		6	51	41	10
334	FreeBSD 1	1.0		Oct. 1, 1993	Jan. 1, 1900		26	112	90	9
335	FreeBSD 0.4_1	0.4_1			Jan. 1, 1900		6	27	30	4

NVD Vulnerability Information

CRITICAL
HIGH
MEDIUM
LOW

No	CVSS3 CVSS2	Level Attach Vector	Title	CWE	CVE	cpe23Uri	or less	Update date Published date	Show Affected	Exploit PoC Search
321	- 4.6	MEDIUM	The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/wr…	NVD-CWE-Other	CVE-2004-0126	cpe:2.3:o:freebsd:freebsd:5.2:* cpe:2.3:o:freebsd:freebsd:5.2.1:release cpe:2.3:o:freebsd:freebsd:5.1:release …		2017-10-10 10:30 2004-03-29	Show	GitHub Exploit DB Packet Storm

322	- 5.0	MEDIUM	FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequenc…	NVD-CWE-Other	CVE-2004-0171	cpe:2.3:o:freebsd:freebsd:5.2:* cpe:2.3:o:freebsd:freebsd:5.1:* cpe:2.3:o:freebsd:freebsd:5.0:* cpe:2.3:o:free…		2017-10-10 10:30 2004-03-15	Show	GitHub Exploit DB Packet Storm

323	- 10.0	HIGH	The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets …	NVD-CWE-Other	CVE-2004-0002	cpe:2.3:o:freebsd:freebsd:5.2:* cpe:2.3:o:freebsd:freebsd:5.1:releng cpe:2.3:o:freebsd:freebsd:5.1:release_p5 …		2008-09-11 04:24 2004-03-3	Show	GitHub Exploit DB Packet Storm

324	- 4.6	MEDIUM	mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical …	NVD-CWE-Other	CVE-2004-0099	cpe:2.3:o:freebsd:freebsd:5.2.1:release cpe:2.3:o:freebsd:freebsd:5.1:release		2017-10-10 10:30 2004-03-3	Show	GitHub Exploit DB Packet Storm

325	- 4.6	MEDIUM	The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's r…	NVD-CWE-Other	CVE-2004-0114	cpe:2.3:o:freebsd:freebsd::	5.2	2017-10-10 10:30 2004-03-3	Show	GitHub Exploit DB Packet Storm

326	- 3.6	LOW	Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathco…	NVD-CWE-Other	CVE-2003-1234	cpe:2.3:o:freebsd:freebsd:5.0:* cpe:2.3:o:freebsd:freebsd:4.9:releng cpe:2.3:o:freebsd:freebsd:4.7:release cpe…		2018-10-20 00:29 2003-12-31	Show	GitHub Exploit DB Packet Storm

327	- 4.3	MEDIUM	ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.	NVD-CWE-Other	CVE-2003-0914	cpe:2.3:o:freebsd:freebsd:5.0:* cpe:2.3:o:freebsd:freebsd:4.9:* cpe:2.3:o:freebsd:freebsd:4.8:* cpe:2.3:o:free…		2018-10-31 01:26 2003-12-15	Show	GitHub Exploit DB Packet Storm

328	- 5.0	MEDIUM	The arplookup function in FreeBSD 5.1 and earlier, Mac OS X before 10.2.8, and possibly other BSD-based systems, allows remote attackers on a local subnet to cause a denial of service (resource starv…	NVD-CWE-Other	CVE-2003-0804	cpe:2.3:o:freebsd:freebsd:5.1:* cpe:2.3:o:freebsd:freebsd:5.0:* cpe:2.3:o:freebsd:freebsd:4.9:pre-release cpe:…		2008-09-11 04:20 2003-11-17	Show	GitHub Exploit DB Packet Storm

329	- 5.0	MEDIUM	The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a denial of service (p…	NVD-CWE-Other	CVE-2003-0688	cpe:2.3:o:freebsd:freebsd:5.0:* cpe:2.3:o:freebsd:freebsd:4.8:* cpe:2.3:o:freebsd:freebsd:4.7:* cpe:2.3:o:free…		2018-05-3 10:29 2003-10-20	Show	GitHub Exploit DB Packet Storm

330	- 10.0	HIGH	The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.	NVD-CWE-Other	CVE-2003-0694	cpe:2.3:o:freebsd:freebsd:5.1:releng cpe:2.3:o:freebsd:freebsd:5.1:release_p5 cpe:2.3:o:freebsd:freebsd:5.0:relen…		2018-10-31 01:26 2003-10-6	Show	GitHub Exploit DB Packet Storm