WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product openbsd✕
Overview 17 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
17matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 2public PoC11.8% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 17 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 17 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 17 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 11.8% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 15 88.2%
split by peak 6 / year
Not applicable: 17 Low: 17 not blocked: 17 No public exploit: 15Working exploit published: 2
19971 Not applicable1 Low1 not blocked1 No public exploit1 19980 19996 Not applicable6 Low6 not blocked6 Working exploit published1 No public exploit5 20000 20013 Not applicable3 Low3 not blocked3 No public exploit3 20023 Not applicable3 Low3 not blocked3 No public exploit3 20031 Not applicable1 Low1 not blocked1 Working exploit published1 20041 Not applicable1 Low1 not blocked1 No public exploit1 20050 20060 20071 Not applicable1 Low1 not blocked1 No public exploit1 20080 20090 20100 20110 20120 20130 20140 20150 20160 20170 20180 20190 20200 20210 20220 20230 20241 Not applicable1 Low1 not blocked1 No public exploit1
1997200020032006200920122015201820212024
17 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-35000 Low 2024-05-07 Not applicable No public exploit OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the implementation of multicast routing. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel. . Was ZDI-CAN-16112.
CVE-2007-1352 Low 2007-04-06 Not applicable No public exploit Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the fonts.dir file, which results in a heap overflow.
CVE-2004-2230 Low 2004-12-31 Not applicable No public exploit Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket.
CVE-2003-1366 Low 2003-12-31 Not applicable Working exploit published chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
CVE-2002-2280 Low 2002-12-31 Not applicable No public exploit syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.
CVE-2002-2092 Low 2002-12-31 Not applicable No public exploit Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid.
CVE-2002-0701 Low 2002-07-23 Not applicable No public exploit ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive information that the process obtained while it was running with the extra privileges.
CVE-2001-0378 Low 2001-06-27 Not applicable No public exploit readline prior to 4.1, in OpenBSD 2.8 and earlier, creates history files with insecure permissions, which allows a local attacker to recover potentially sensitive information via readline history files.
CVE-2001-1047 Low 2001-06-02 Not applicable No public exploit Race condition in OpenBSD VFS allows local users to cause a denial of service (kernel panic) by (1) creating a pipe in one thread and causing another thread to set one of the file descriptors to NULL via a close, or (2) calling dup2 on a file descriptor in one process, then setting the descriptor to NULL via a close in another process that is created via rfork.
CVE-2000-0309 Low 2001-03-12 Not applicable No public exploit The i386 trace-trap handling in OpenBSD 2.4 with DDB enabled allows a local user to cause a denial of service.
CVE-2000-0489 Low 1999-09-05 Not applicable Working exploit published FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
CVE-1999-0703 Low 1999-08-03 Not applicable No public exploit OpenBSD, BSDI, and other Unix operating systems allow users to set chflags and fchflags on character and block devices.
CVE-1999-0483 Low 1999-02-25 Not applicable No public exploit OpenBSD crash using nlink value in FFS and EXT2FS filesystems.
CVE-1999-0484 Low 1999-02-23 Not applicable No public exploit Buffer overflow in OpenBSD ping.
CVE-1999-0485 Low 1999-02-19 Not applicable No public exploit Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD.
CVE-1999-0396 Low 1999-02-17 Not applicable No public exploit A race condition between the select() and accept() calls in NetBSD TCP servers allows remote attackers to cause a denial of service.
CVE-1999-1214 Low 1997-09-15 Not applicable No public exploit The asynchronous I/O facility in 4.4 BSD kernel does not check user credentials when setting the recipient of I/O notification, which allows local users to cause a denial of service by using certain ioctl and fcntl calls to cause the signal to be sent to an arbitrary process ID.