ISOMAN

Filtered CVEs

MidnightBSD CVEs

CVEs linked to tracked MidnightBSD releases.

All CVEsAll ISOs

Release Context

  1. MidnightBSD · 4.0.5 amd64 bootonly
  2. MidnightBSD · 4.0.5 amd64 disc1
  3. MidnightBSD · 4.0.5 amd64 memstick
  4. MidnightBSD · 4.0.5 amd64 mini-memstick
  5. MidnightBSD · 4.0.5 i386 bootonly
  6. MidnightBSD · 4.0.5 i386 disc1
  7. MidnightBSD · 4.0.5 i386 memstick
  8. MidnightBSD · 4.0.5 i386 mini-memstick
  9. MidnightBSD · 4.0.6 amd64 bootonly
  10. MidnightBSD · 4.0.6 amd64 disc1
  11. MidnightBSD · 4.0.6 amd64 memstick
  12. MidnightBSD · 4.0.6 amd64 mini-memstick
  13. MidnightBSD · 4.0.6 i386 bootonly
  14. MidnightBSD · 4.0.6 i386 disc1
  15. MidnightBSD · 4.0.6 i386 memstick
  16. MidnightBSD · 4.0.6 i386 mini-memstick
  17. MidnightBSD · 4.0.7 amd64 bootonly
  18. MidnightBSD · 4.0.7 amd64 disc1
  19. MidnightBSD · 4.0.7 amd64 memstick
  20. MidnightBSD · 4.0.7 amd64 mini-memstick
  21. MidnightBSD · 4.0.7 i386 bootonly
  22. MidnightBSD · 4.0.7 i386 disc1
  23. MidnightBSD · 4.0.7 i386 memstick
  24. MidnightBSD · 4.0.7 i386 mini-memstick

2 CVEs

  1. CVE-2020-24863
    MEDIUM · CVSS 5.5 ·

    A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.

  2. CVE-2020-24385
    MEDIUM · CVSS 5.5 ·

    In MidnightBSD before 1.2.6 and 1.3 before August 2020, and FreeBSD before 7, a NULL pointer dereference was found in the Linux emulation layer that allows attackers to crash the running kernel. During binary interaction, td->td_emuldata in sys/compat/linux/linux_emul.h is not getting initialized and returns NULL from em_find().