Exposição de FreeBSD

Operating systems
146
score de exposição
2.406
sites usam
0
em exploração
10
críticos
Análise Vexday

Com 162 CVEs catalogadas e nenhuma entrada no catálogo CISA KEV, o FreeBSD apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere um perfil de risco relativamente contido em termos de ameaças confirmadas em produção. Ainda assim, 7 vulnerabilidades de severidade crítica e 16 surgidas nos últimos 90 dias indicam uma superfície ativa que requer monitoramento contínuo. O tipo de falha mais frequente é CWE-787 (escrita fora dos limites de memória), classe de vulnerabilidade com histórico relevante de exploração em sistemas de baixo nível. A CVE com maior pontuação EPSS no conjunto é CVE-2020-7457, com valor de 0,33, sinalizando probabilidade não desprezível de exploração e merecendo atenção prioritária em ambientes que ainda não aplicaram a correção correspondente.

CVEs

216 resultados
CVE-2024-6640MEDIUMpf incorrectly matches different ICMPv6 states in the state tableEPSS 0.5%CVE-2024-51564HIGHbhyve(8) infinite loop in the hda audio driverEPSS 0.5%CVE-2024-39281MEDIUMUnbounded allocation in ctl(4) CAM Target LayerEPSS 0.5%CVE-2022-23086CRITICALmpr/mps/mpt driver ioctl heap out-of-bounds writeEPSS 0.4%CVE-2026-7164HIGHpf can overflow the stack parsing crafted SCTP packetsEPSS 0.4%CVE-2026-42511HIGHRemote code execution via malicious DHCP optionsEPSS 0.4%CVE-2025-0373MEDIUMBuffer overflow in some filesystems via NFSEPSS 0.4%CVE-2012-4576—FreeBSD: Input Validation Flaw allows local users to gain elevated privilegesEPSS 0.4%CVE-2026-49420HIGHBuffer overflow in libalias RTSP handlerEPSS 0.4%CVE-2017-1087—In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one EPSS 0.4%CVE-2024-51562MEDIUMbhyve(8) nvme_opc_get_log_page buffer over-readEPSS 0.4%CVE-2026-45250HIGHStack buffer overflow via setcred(2)EPSS 0.4%CVE-2020-7459—In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before pEPSS 0.4%CVE-2024-51565MEDIUMbhyve(8) hda driver buffer over-readEPSS 0.4%CVE-2018-6924—In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient validation in the ELF headEPSS 0.4%CVE-2020-7463—In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before pEPSS 0.4%CVE-2024-42416HIGHMultiple issues in ctl(4) CAM Target LayerEPSS 0.4%CVE-2024-43110HIGHMultiple issues in ctl(4) CAM Target LayerEPSS 0.4%CVE-2024-51566MEDIUMbhyve(8) NVMe driver to guest-induced infinite loops.EPSS 0.4%CVE-2017-1088—In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not prEPSS 0.4%