Skip to content
OpenAdvisories
Medium WID-SEC-2026-0878 4 CVEs

FreeBSD Project FreeBSD OS: Mehrere Schwachstellen

Published Mar 25, 2026 · Updated Apr 21, 2026 · Revision 4 · de-DE

Vendor: FreeBSD Vendor: NETAPP Product: Data ONTAP Product: FreeBSD OS Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in FreeBSD Project FreeBSD OS ausnutzen, um einen Denial of Service Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.

Vulnerabilities 4

  • High 8.8
    CVE-2026-4747 Public exploit

    Remote code execution via RPCSEC_GSS packet validation

    Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet. This routine copies a portion of the packet into a stack buffer, but fails to ensure that the buffer is sufficiently large, and a malicious client can trigger a stac…

    FreeBSD FreeBSD
  • High 7.5
    CVE-2026-4247

    TCP: remotely exploitable DoS vector (mbuf leak)

    When a challenge ACK is to be sent tcp_respond() constructs and sends the challenge ACK and consumes the mbuf that is passed in. When no challenge ACK should be sent the function returns and leaks the mbuf. If an attacker is either on path with an established…

    FreeBSD FreeBSD
  • High 7.5
    CVE-2026-4652

    Remote denial of service via null pointer dereference

    On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID. An attacker with network access to the NVMe/TCP target can trigger an unauthenticated Denial of Ser…

    FreeBSD FreeBSD
  • High 7.5
    CVE-2026-4748

    pf silently ignores certain rules

    A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved to be silently dropped as duplicates. Only the first of such rules is actually loaded into pf…

    FreeBSD FreeBSD

Revision history

  1. #4

    Neue Updates von NetApp aufgenommen

  2. #3

    Referenz aufgenommen: EUVD-2026-17818

  3. #2

    Referenz(en) aufgenommen: EUVD-2026-16128

  4. #1

    Initiale Fassung

References