netbsd

Top products

The 15 most recently published vulnerabilities affecting netbsd.

• CVE-2026-32848NetBSD cryptodev Race Condition Double-Free via cryptodev_op()4.7May 18, 2026
• CVE-2026-32849NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c5.5May 18, 2026
• CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos8.1Jul 1, 2024
• CVE-2023-45198ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd (the portable version of NetBSD ftpd) before 20231001 is ...7.5Oct 5, 2023
• CVE-2021-45484In NetBSD through 9.2, the IPv6 fragment ID generation algorithm employs a weak cryptographic PRNG.7.5Dec 25, 2021
• CVE-2021-45487In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.7.5Dec 25, 2021
• CVE-2021-45488In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.7.5Dec 25, 2021
• CVE-2021-45489In NetBSD through 9.2, the IPv6 Flow Label generation algorithm employs a weak cryptographic PRNG.7.5Dec 25, 2021
• CVE-2020-26139An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might ...5.3May 11, 2021
• CVE-2012-5363The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a ...7.5Feb 20, 2020
• CVE-2012-5365The IPv6 implementation in FreeBSD and NetBSD (unknown versions, year 2012 and earlier) allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets conta...7.5Feb 20, 2020
• CVE-2011-2480Information Disclosure vulnerability in the 802.11 stack, as used in FreeBSD before 8.2 and NetBSD when using certain non-x86 architectures. A signedness error in the IEEE80211_IOC_CHANINFO ioctl a...7.5Nov 27, 2019
• CVE-2017-1000378The NetBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort() to deterministically recurse N/4 times. This all...9.8Jun 19, 2017
• CVE-2017-1000375NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attackers to more easily manipulate memory leading to arbitrary code execution. This...9.8Jun 19, 2017
• CVE-2017-1000374A flaw exists in NetBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using certain setuid binaries. This affects NetBSD 7.1 and ...9.8Jun 19, 2017