DeutschShown in its original language — a full translation is planned for a future version.
FreeBSD Project FreeBSD OS: Mehrere Schwachstellen
view advisory published 2026-03-25
Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-4748US | — | — | ||
A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently… | ||||
| CVE-2026-4747US | — | Exploit | ||
Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure… | ||||
| CVE-2026-4652US | — | — | ||
On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID.
An attacker with ne… | ||||
| CVE-2026-4247US | — | — | ||
When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function… | ||||
02
references
External citations — patches, advisories, analysis.
- NetApp Security Advisory NTAP-20260417-0005 vom 2026-04-21external
- WID-SEC-W-2026-0878 - CSAF Versionself
- WID-SEC-2026-0878 - Portal Versionself
- FreeBSD Security Advisory FreeBSD-SA-26:06.tcp vom 2026-03-25external
- FreeBSD Security Advisory FreeBSD-SA-26:07.nvmf vom 2026-03-25external
- FreeBSD Security Advisory FreeBSD-SA-26:08.rpcsec_gss vom 2026-03-25external
- FreeBSD Security Advisory FreeBSD-SA-26:09.pf vom 2026-03-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan