BSD operating systems and utilities occupy a prominent niche in the vulnerability landscape, with exposure concentrated across core components such as the kernel, the line-printer daemon (lpr), and the nvi text editor. Vulnerabilities affecting this vendor frequently acquire public exploit code, reflecting both the open nature of BSD codebases and their deployment in security-sensitive infrastructure where flaws attract community attention. The recurring weakness classifications in available disclosures center on parser and privilege-handling issues endemic to system software; current severity, exploitation activity, and detailed exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Bsd over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-4609HIGH The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cau | Oct 20, 2008 | 7.1 | 40 | NO | NO |
CVE-2003-0144HIGH Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain roo | Mar 31, 2003 | 7.2 | 30 | NO | YES |
CVE-2007-2191MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web script or HTML via the (1) From, (2) To, (3) Call-ID, (4) User-A | Apr 24, 2007 | 6.8 | 28 | NO | YES |
CVE-2001-0670HIGH Buffer overflow in BSD line printer daemon (in.lpd or lpd) in various BSD-based operating systems allows remote attackers to execute arbitrary code via an incomplete print job foll | Oct 3, 2001 | 7.5 | 21 | NO | NO |
CVE-2001-1562HIGH Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. | Dec 31, 2001 | 7.2 | 18 | NO | NO |
CVE-1999-1471HIGH Buffer overflow in passwd in BSD based operating systems 4.3 and earlier allows local users to gain root privileges by specifying a long shell or GECOS field. | Jan 1, 1989 | 7.2 | 18 | NO | NO |
BSD 4.4 based operating systems, when running at security level 1, allow the root user to clear the immutable and append-only flags for files by unmounting the file system and usin | Jul 2, 1999 | 2.1 | 17 | NO | YES |
CVE-2014-7250MEDIUM The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer, which allows remote attackers t | Dec 12, 2014 | 5.0 | 16 | NO | NO |
CVE-1999-1098MEDIUM Vulnerability in BSD Telnet client with encryption and Kerberos 4 authentication allows remote attackers to decrypt the session via sniffing. | Mar 3, 1995 | 5.0 | 15 | NO | NO |
lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack that is triggered afte | Dec 31, 1999 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Bsd.
Media articles that mention a CVE ID that affects a product developed by Bsd — matched by CVE ID, not by vendor name.