NetBSD

CVEs (179)

• CVE-2014-3566LowOct 15, 2014
  OpenSSL Project

  OpenSSL
  risk 0.33cvss 3.4epss 1.00

  The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

• CVE-2026-32849MedMay 18, 2026
  NetBSD

  NetBSD
  risk 0.29cvss 5.5epss 0.00

  NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable iov_len is declared as a signed int but assigned from an unsigned cop->dst_len value, causing undefined behavior…

• CVE-2026-32848MedMay 18, 2026
  NetBSD

  NetBSD
  risk 0.24cvss 4.7epss 0.00

  NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a double-free condition by concurrently issuing CIOCCRYPT operations on the same session identifier on SMP systems.…

• CVE-1999-0016Dec 1, 1997
  Sun Corporation

  Sunos
  risk 0.11cvss —epss 0.96

  Land IP denial of service.

• CVE-2014-8517Nov 17, 2014
  Luke Mewburn

  Tnftp
  risk 0.09cvss —epss 0.69

  The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.

• CVE-2004-0230Aug 18, 2004
  Microsoft

  Windows 2000
  risk 0.09cvss —epss 0.80

  TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections,…

• CVE-2002-1337Mar 7, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.09cvss —epss 0.73

  Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

• CVE-2003-0001Jan 17, 2003
  Linux

  Kernel
  risk 0.09cvss —epss 0.70

  Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.

• CVE-1999-0513Jan 5, 1998
  IBM

  Aix
  risk 0.09cvss —epss 0.71

  ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

• CVE-2003-0694Oct 6, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.08cvss —epss 0.66

  The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

• CVE-1999-0046Feb 6, 1997
  Bsdi

  BSD OS
  risk 0.07cvss —epss 0.52

  Buffer overflow of rlogin program using TERM environmental variable.

• CVE-2001-0554Aug 14, 2001
  Telnetd

  Telnetd
  risk 0.06cvss —epss 0.39

  Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

• CVE-1999-0015Dec 16, 1997
  Sun Corporation

  Sunos
  risk 0.06cvss —epss 0.35

  Teardrop IP denial of service.

• CVE-2011-0419May 16, 2011
  Apache

  HTTP Server
  risk 0.05cvss —epss 0.30

  Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris…

• CVE-2009-0689Jul 1, 2009
  Seamonkey

  Seamonkey
  risk 0.05cvss —epss 0.28

  Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x…

• CVE-2008-1391Mar 27, 2008
  Apple Inc.

  Mac OS 9
  risk 0.05cvss —epss 0.19

  Multiple integer overflows in libc in NetBSD 4.x, FreeBSD 6.x and 7.x, and probably other BSD and Apple Mac OS platforms allow context-dependent attackers to execute arbitrary code via large values of certain integer fields in the format argument to (1) the strfmon function in…

• CVE-2006-6652Dec 20, 2006
  Apple Inc.

  Mac OS X
  risk 0.05cvss —epss 0.20

  Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long…

• CVE-2003-0681Oct 6, 2003
  Sendmail, Inc.

  Sendmail
  risk 0.05cvss —epss 0.22

  A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has unknown consequences.

• CVE-2001-0247Jun 18, 2001
  Sgi

  Irix
  risk 0.05cvss —epss 0.19

  Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} sequence, as seen in (1) g_opendir, (2) g_lstat, (3) g_stat, and (4) the glob0 buffer as used in the glob functions glob2 and glob3.

• CVE-1999-0009Apr 8, 1998
  Isc

  Bind
  risk 0.05cvss —epss 0.29

  Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.