openbsd 8.0
- 019 · A local user logged in on the glass console could write out of bounds to kernel memory and use this to gain root priv…
- 018 · A race in IPv6 duplicate address detection could corrupt kernel memory.
- 017 · A race in TCP syn cache could crash the kernel remotely.
- 016 · TCP SACK packets could crash the kernel remotely.
- 015 · Fix a buffer overflow in the libc stub DNS resolver.
- 014 · Fix a local root exploit through a reference count race in the vnode pager that can be triggered with kbind(2).
- 013 · Fix an out of bounds read that may happen during renegotiation in TLSv1.2.
- 012 · Fix out of bounds reads and writes as well as info leaks in zlib.
- 011 · Fix out of bounds reads and writes as well as info leaks in zlib.
- 010 · Multiple vulnerabilities in the X server Resources, Test, Xv extensions and EDID Display range parsing.
- 009 · With unveil(2), an obscure filesystem use could lock the kernel.
- 008 · If pf is configured with FQ-CoDel queueing, sustained traffic overloading a queue could crash the kernel.
- 007 · Multiple security issues in X.Org X client libraries.
- 006 · By sending crafted IKEv1 messages, an unauthenticated remote attacker could crash isakmpd(8) due to a NULL pointer de…
- 005 · Add the dbupdate utility that can be used to update /etc/ssl/cert.pem and /usr/share/zoneinfo.
- 004 · Multiple bugs in video(4) could lead to use-after-free and kernel memory corruption.
- 003 · When IPsec is used with AES-GMAC, a kernel heap overflow could be triggered remotely.
- 002 · Backport security fixes from nsd(8) version 4.15.3.
- 001 · In ppp(4), an off-by-one error could lead to an out-of-bounds write.
openbsd 7.9
- 054 · A local user logged in on the glass console could write out of bounds to kernel memory and use this to gain root priv…
- 053 · A race in IPv6 duplicate address detection could corrupt kernel memory.
- 052 · A race in TCP syn cache could crash the kernel remotely.
- 051 · TCP SACK packets could crash the kernel remotely.
- 050 · Fix a buffer overflow in the libc stub DNS resolver.
- 049 · Fix a local root exploit through a reference count race in the vnode pager that can be triggered with kbind(2).
- 048 · Fix TLS interoperability with peers sending more than 32 signature algorithms.
- 047 · Fix out of bounds reads and writes as well as info leaks in zlib.
- 046 · Fix out of bounds reads and writes as well as info leaks in zlib.
- 045 · Multiple vulnerabilities in the X server Resources, Test, Xv extensions and EDID Display range parsing.
- 044 · With unveil(2), an obscure filesystem use could lock the kernel.
- 043 · If pf is configured with FQ-CoDel queueing, sustained traffic overloading a queue could wrap a drop counter and distu…
- 042 · Multiple security issues in X.Org X client libraries.
- 041 · By sending crafted IKEv1 messages, an unauthenticated remote attacker could crash isakmpd(8) due to a NULL pointer de…
- 040 · Add the dbupdate utility that can be used to update /etc/ssl/cert.pem and /usr/share/zoneinfo.
- 039 · Multiple bugs in video(4) could lead to use-after-free and kernel memory corruption.
- 038 · When IPsec is used with AES-GMAC, a kernel heap overflow could be triggered remotely.
- 037 · Backport security fixes from nsd(8) version 4.15.3.
- 036 · By providing malformed config mode payloads, a malicious IKEv1 peer could crash isakmpd(8) due to an out-of-bounds read.
- 035 · In ppp(4), an off-by-one error could lead to an out-of-bounds write.
- 034 · In wscons(4), do not allow screen deletion while switching.
- 033 · Backport fixes from libexpat 2.8.5.
- 032 · Multiple vulnerabilites in the X server Xinput, dix, glamor, glx, present and Xkb extensions.
- 031 · isakmpd(8) contains numerous bugs, which are fixed.
- 030 · Incorrect upper bound for uid and gid can result in -1 being used.
- 029 · Semaphore operation semop(2) could trigger a use-after-free in the kernel.
- 028 · After wg(4) interface destruction a use-after-free coould be triggered by incoming packets.
- 027 · A malicious IKEv2 peer could crash iked(8), or cause a certificate validation verdict to be applied to the wrong peer…
- 026 · A reference counting bug could lead to use-after-free in the kernel.
- 025 · An errant process could cause ps(1) to crash due to a buffer overflow in sysctl(2).
- 024 · Fix a variety of bugs in libressl
- 023 · Update unbound(8) to version 1.26.1.
- 022 · Update nsd(8) to version 4.15.2.
- 021 · In ldapd(8), an authentication result from one transaction could be applied to another.
- 020 · Multiple vulnerabilities in the X server and server side font library.
- 019 · Backport all changes from libexpat 2.8.4.
- 018 · Prevent integer overflow in shmat(4).
- 017 · Prevent integer overflow in wscons(4).
- 016 · A malicous NFS server could aid a local user in avoiding access controls.
- 015 · In smtpd(8) a custom MDA could execute arbitrary code as an unprivileged recipient user.
- 014 · Backport all changes from libexpat 2.8.3.
- 013 · TIOCGSID on tty(4) could trigger a kernel panic.
- 012 · The sysctl(2) kern.proc could leak kernel memory.
- 011 · A race in pledge(2) namei check could trigger a kernel panic.
- 010 · Interface ioctl(4) could leak 4 bytes of kernel memory.
- 009 · iked(8) could be crashed remotely pre authentication.
- 008 · Heap or stack corruption in npppd(8) LCP option handling could lead to crashes.
- 007 · Stricter IPsec and IPComp input validation prevents kernel crash.
- 006 · Fix double-free, memory leaks, and vnode references in NFS server.
- 005 · Fix numerous problems in the System V (sem, msg, ipc) system call layers.
- 004 · Fix some info leaks, kernel crashes, and pinsyscall(8) / kbind(8) locking failures.
- 003 · In vmd(8), fix a variety of crashing bugs and misbehavior of -b flag.
- 002 · Fixes for a variety of crashing bugs in smtpd(8).
- 001 · Multiple vulnerabilites in the X server dri2, sync, saver and Xkb extensions.