Summary
Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu verursachen.
Product
FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.
Vulnerabilities 2
-
High 7.5
ipfw denial of service
In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule can then allow the traffic after the packet data is gone, resulting in a NULL pointer dereference. Maliciously cr…
-
High 7.2CVE-2025-14558 Public exploit
Remote code execution via ND6 Router Advertisements
The rtsol(8) and rtsold(8) programs do not validate the domain search list options provided in router advertisement messages; the option body is passed to resolvconf(8) unmodified. resolvconf(8) is a shell script which does not validate its input. A lack of q…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-208403, EUVD-2025-208404, EUVD-2025-208405, EUVD-2025-208406
-
#1
Initiale Fassung
References
-
FreeBSD Security Advisory FreeBSD-SA-25:12.rtsold vom 2025-12-17
https://www.freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc
-
FreeBSD Security Advisory FreeBSD-SA-25:11.ipfw vom 2025-12-17
https://www.freebsd.org/security/advisories/FreeBSD-SA-25:11.ipfw.asc