freebsd Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/freebsd/ Sun, 26 Feb 2023 06:31:33 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png freebsd Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/freebsd/ 32 32 CVE-2019-17388 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17388/ Sun, 26 Feb 2023 06:31:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17388/ Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

The post CVE-2019-17388 appeared first on CVE Vulnerability.

]]> Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

The post CVE-2019-17388 appeared first on CVE Vulnerability.

]]> CVE-2023-0751 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0751/ Wed, 22 Feb 2023 14:02:16 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0751 When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is […]

The post CVE-2023-0751 appeared first on CVE Vulnerability.

]]> When GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.

The post CVE-2023-0751 appeared first on CVE Vulnerability.

]]>