FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-28 15:43:32 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
45a95fdd-f680-11e9-a87f-a4badb2f4699FreeBSD -- Insufficient message length validation in bsnmp library

Problem Description:

A function extracting the length from type-length-value encoding is not properly validating the submitted length.

Impact:

A remote user could cause, for example, an out-of-bounds read, decoding of unrelated data, or trigger a crash of the software such as bsnmpd resulting in a denial of service.


Discovery 2019-08-06
Entry 2019-10-24
FreeBSD
ge 12.0 lt 12.0_9

ge 11.3 lt 11.3_2

ge 11.2 lt 11.2_13

CVE-2019-5610
SA-19:20.bsnmp