--- vuln.xml 2020-01-29 10:24:11.927544000 +0100 +++ vuln.xml.new 2020-01-29 10:26:06.054639000 +0100 @@ -58,6 +58,96 @@ * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> + + FreeBSD -- kernel stack data disclosure + + + FreeBSD-kernel + 12.112.1_2 + 12.012.0_13 + 11.311.3_6 + + + + +

Problem Description:

Due to incorrect initialization of a stack data structure, up to 20 + bytes of kernel data stored previously stored on the stack will be + exposed to a crashing user process.

Impact:

Sensitive kernel data may be disclosed.

+ + + + CVE-2019-15875 + SA-20:03.thrmisc + + + 2020-01-28 + 2020-01-29 + + + + + FreeBSD -- Missing IPsec anti-replay window check + + + FreeBSD-kernel + 12.012.0_13 + + + + +

Problem Description:

A missing check means that an attacker can reinject an old packet and + it will be accepted and processed by the IPsec endpoint.

Impact:

The impact depends on the higher-level protocols in use over IPsec. + For example, an attacker who can capture and inject packets could + cause an action that was intentionally performed once to be repeated.

+ + + + CVE-2019-5613 + SA-20:02.ipsec + + + 2020-01-28 + 2020-01-29 + + + + + FreeBSD -- libfetch buffer overflow + + + FreeBSD + 12.112.1_2 + 12.012.0_13 + 11.311.3_6 + + + + +

Problem Description:

A programming error allows an attacker who can specify a URL with a + username and/or password components to overflow libfetch(3) buffers.

Impact:

An attacker in control of the URL to be fetched (possibly via HTTP + redirect) may cause a heap buffer overflow, resulting in program + misbehavior or malicious code execution.

+ + + + CVE-2020-7450 + SA-20:01.libfetch + + + 2020-01-28 + 2020-01-29 + + + samba -- multiple vulnerabilities