Exposição de FreeBSD
Operating systems82
score de exposição
2.596
sites usam
0
em exploração
7
críticos
Análise Vexday
Com 162 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o FreeBSD apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere um perfil de risco relativamente contido em termos de ameaças confirmadas em produção. Ainda assim, 7 vulnerabilidades de severidade crítica e 16 surgidas nos últimos 90 dias indicam uma superfície ativa que requer monitoramento contínuo. O tipo de falha mais frequente é CWE-787 (escrita fora dos limites de memória), classe de vulnerabilidade com histórico relevante de exploração em sistemas de baixo nível. A CVE com maior pontuação EPSS no conjunto é CVE-2020-7457, com valor de 0,33, sinalizando probabilidade não desprezível de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente.
CVEs
171 resultadosCVE-2020-7457—In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before pEPSS 33.1%CVE-2018-17157—In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error when handling opcodes can cause memory corruption by sEPSS 24.2%CVE-2017-1084—In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guardEPSS 15.3%CVE-2025-14558HIGHRemote code execution via ND6 Router AdvertisementsEPSS 6.3%CVE-2019-5599—In FreeBSD 12.0-STABLE before r349197 and 12.0-RELEASE before 12.0-RELEASE-p6, a bug in the non-default RACK TCP stack can allow an attackerEPSS 5.2%CVE-2019-5600—In FreeBSD 12.0-STABLE before r349622, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349624, 11.3-RC3 before 11.3-RC3-p1, andEPSS 4.9%CVE-2019-5611—In FreeBSD 12.0-STABLE before r350828, 12.0-RELEASE before 12.0-RELEASE-p10, 11.3-STABLE before r350829, 11.3-RELEASE before 11.3-RELEASE-p3EPSS 4.4%CVE-2018-17158—In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, an integer overflow error can occur when handling the client address length fielEPSS 4.4%CVE-2018-6918—In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p9, 10.4-STABLE, 10.4-RELEASE-p8 and 10.3-RELEASE-p28, the length field of the ipsec option headEPSS 4.4%CVE-2018-17159—In FreeBSD before 11.2-STABLE(r340854) and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. UnprivilegedEPSS 4.2%CVE-2020-7461—In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before pEPSS 4.1%CVE-2019-5602—In FreeBSD 12.0-STABLE before r349628, 12.0-RELEASE before 12.0-RELEASE-p7, 11.3-PRERELEASE before r349629, 11.3-RC3 before 11.3-RC3-p1, andEPSS 4.1%CVE-2018-6923—In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial of service due to exEPSS 4.0%CVE-2019-5610—In FreeBSD 12.0-STABLE before r350637, 12.0-RELEASE before 12.0-RELEASE-p9, 11.3-STABLE before r350638, 11.3-RELEASE before 11.3-RELEASE-p2,EPSS 3.8%CVE-2019-5597—In FreeBSD 11.3-PRERELEASE and 12.0-STABLE before r347591, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-RELEASE-p4, a EPSS 3.6%CVE-2022-23088CRITICAL802.11 heap buffer overflowEPSS 3.6%CVE-2018-17161—In FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r342228), and 12.0-RELEASE-p1, insufficient validation of network-proviEPSS 3.5%CVE-2018-17160—In FreeBSD before 11.2-STABLE(r341486) and 11.2-RELEASE-p6, insufficient bounds checking in one of the device models provided by bhyve can pEPSS 3.3%CVE-2019-5598—In FreeBSD 11.3-PRERELEASE before r345378, 12.0-STABLE before r345377, 11.2-RELEASE before 11.2-RELEASE-p10, and 12.0-RELEASE before 12.0-REEPSS 3.3%CVE-2018-6922—One of the data structures that holds TCP segments in all versions of FreeBSD prior to 11.2-RELEASE-p1, 11.1-RELEASE-p12, and 10.4-RELEASE-pEPSS 3.2%