OpenBSD

CVEs (208)

• CVE-2000-0994Dec 19, 2000
  OpenBSD

  OpenBSD
  risk 0.03cvss —epss 0.01

  Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable.

• CVE-2000-0751Oct 20, 2000
  OpenBSD

  OpenBSD
  risk 0.03cvss —epss 0.04

  mopd (Maintenance Operations Protocol loader daemon) does not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands.

• CVE-2000-0489Sep 5, 1999
  FreeBSD

  FreeBSD
  risk 0.03cvss —epss 0.01

  FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.

• CVE-1999-0674Aug 9, 1999
  Sun Corporation

  Solaris
  risk 0.03cvss —epss 0.01

  The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.

• CVE-2011-2895Aug 19, 2011
  FreeType

  Freetype
  risk 0.01cvss —epss 0.08

  The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType…

• CVE-2010-4755Mar 2, 2011
  OpenSSH

  OpenSSH
  risk 0.01cvss —epss 0.08

  The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory…

• CVE-2008-2476Oct 3, 2008
  Force10

  Ftos
  risk 0.01cvss —epss 0.07

  The IPv6 Neighbor Discovery Protocol (NDP) implementation in (1) FreeBSD 6.3 through 7.1, (2) OpenBSD 4.2 and 4.3, (3) NetBSD, (4) Force10 FTOS before E7.7.1.1, (5) Juniper JUNOS, and (6) Wind River VxWorks 5.x through 6.4 does not validate the origin of Neighbor Discovery…

• CVE-2006-4304Aug 24, 2006
  FreeBSD

  FreeBSD
  risk 0.01cvss —epss 0.12

  Buffer overflow in the sppp driver in FreeBSD 4.11 through 6.1, NetBSD 2.0 through 4.0 beta before 20060823, and OpenBSD 3.8 and 3.9 before 20060902 allows remote attackers to cause a denial of service (panic), obtain sensitive information, and possibly execute arbitrary code…

• CVE-2004-0081Nov 23, 2004
  OpenSSL Project

  OpenSSL
  risk 0.01cvss —epss 0.07

  OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

• CVE-2004-0112Nov 23, 2004
  OpenSSL Project

  OpenSSL
  risk 0.01cvss —epss 0.10

  The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…

• CVE-2004-0687Oct 20, 2004
  Xorg

  Libxpm
  risk 0.01cvss —epss 0.08

  Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

• CVE-2004-0688Oct 20, 2004
  Libxpm

  Libxpm
  risk 0.01cvss —epss 0.07

  Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

• CVE-2004-1082Feb 3, 2004
  Apache

  HTTP Server
  risk 0.01cvss —epss 0.08

  mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

• CVE-2003-0028Mar 25, 2003
  dietlibc

  dietlibc
  risk 0.01cvss —epss 0.15

  Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in…

• CVE-2002-1219Nov 29, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.12

  Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).

• CVE-2002-1221Nov 29, 2002
  Isc

  Bind
  risk 0.01cvss —epss 0.08

  BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.

• CVE-2001-0670Oct 3, 2001
  BSD

  BSD
  risk 0.01cvss —epss 0.07

  Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job followed by a request to display the printer queue.

• CVE-2025-30334MedMar 20, 2025
  OpenBSD

  OpenBSD
  risk 0.00cvss 6.5epss 0.00

  In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before errata 015, traffic sent over wg(4) could result in kernel crash.

• CVE-2023-52558HigMar 1, 2024
  OpenBSD

  OpenBSD
  risk 0.00cvss 7.5epss 0.01

  In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

• CVE-2023-52557HigMar 1, 2024
  OpenBSD

  OpenBSD
  risk 0.00cvss 7.5epss 0.01

  In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.