{"document":{"aggregate_severity":{"text":"mittel"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"FreeBSD ist ein Open Source Betriebssystem aus der BSD Familie und gehört damit zu den Unix Derivaten.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FreeBSD Project ausnutzen, um Sicherheitsvorkehrungen zu umgehen und sich als beliebiger TLS-Server auszugeben, wodurch er den Netzwerkverkehr ausspähen oder verändern kann.","title":"Angriff"},{"category":"general","text":"- UNIX","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-4071 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4071.json"},{"category":"self","summary":"WID-SEC-2026-4071 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4071"},{"category":"external","summary":"FreeBSD Security Advisory FreeBSD-SA-26:73.caroot vom 2026-10-20","url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-26:73.caroot.asc"}],"source_lang":"en-US","title":"FreeBSD Project (caroot): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","tracking":{"current_release_date":"2026-10-20T22:00:00.000+00:00","generator":{"date":"2026-10-21T11:27:20.393+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-4071","initial_release_date":"2026-10-20T22:00:00.000+00:00","revision_history":[{"date":"2026-10-20T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version_range","name":"<15.1-STABLE","product":{"name":"FreeBSD Project FreeBSD OS <15.1-STABLE","product_id":"T061582"}},{"category":"product_version","name":"15.1-STABLE","product":{"name":"FreeBSD Project FreeBSD OS 15.1-STABLE","product_id":"T061582-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:15.1-stable"}}},{"category":"product_version_range","name":"<15.1-RELEASE-p6","product":{"name":"FreeBSD Project FreeBSD OS <15.1-RELEASE-p6","product_id":"T061583"}},{"category":"product_version","name":"15.1-RELEASE-p6","product":{"name":"FreeBSD Project FreeBSD OS 15.1-RELEASE-p6","product_id":"T061583-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:15.1-release-p6"}}},{"category":"product_version_range","name":"<14.5-STABLE","product":{"name":"FreeBSD Project FreeBSD OS <14.5-STABLE","product_id":"T061584"}},{"category":"product_version","name":"14.5-STABLE","product":{"name":"FreeBSD Project FreeBSD OS 14.5-STABLE","product_id":"T061584-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:14.5-stable"}}},{"category":"product_version_range","name":"<14.5-RELEASE-p3","product":{"name":"FreeBSD Project FreeBSD OS <14.5-RELEASE-p3","product_id":"T061585"}},{"category":"product_version","name":"14.5-RELEASE-p3","product":{"name":"FreeBSD Project FreeBSD OS 14.5-RELEASE-p3","product_id":"T061585-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:14.5-release-p3"}}},{"category":"product_version_range","name":"<14.4-RELEASE-p12","product":{"name":"FreeBSD Project FreeBSD OS <14.4-RELEASE-p12","product_id":"T061586"}},{"category":"product_version","name":"14.4-RELEASE-p12","product":{"name":"FreeBSD Project FreeBSD OS 14.4-RELEASE-p12","product_id":"T061586-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:14.4-release-p12"}}},{"category":"product_version_range","name":"15.1 <SA-26:73/caroot-15.patch","product":{"name":"FreeBSD Project FreeBSD OS 15.1 <SA-26:73/caroot-15.patch","product_id":"T061587"}},{"category":"product_version","name":"15.1 SA-26:73/caroot-15.patch","product":{"name":"FreeBSD Project FreeBSD OS 15.1 SA-26:73/caroot-15.patch","product_id":"T061587-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:15.1__sa-2673caroot-15.patch"}}},{"category":"product_version_range","name":"14.5 <SA-26:73/caroot-14.5.patch","product":{"name":"FreeBSD Project FreeBSD OS 14.5 <SA-26:73/caroot-14.5.patch","product_id":"T061588"}},{"category":"product_version","name":"14.5 SA-26:73/caroot-14.5.patch","product":{"name":"FreeBSD Project FreeBSD OS 14.5 SA-26:73/caroot-14.5.patch","product_id":"T061588-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:14.5__sa-2673caroot-14.5.patch"}}},{"category":"product_version_range","name":"14.4 <SA-26:73/caroot-14.4.patch","product":{"name":"FreeBSD Project FreeBSD OS 14.4 <SA-26:73/caroot-14.4.patch","product_id":"T061589"}},{"category":"product_version","name":"14.4 SA-26:73/caroot-14.4.patch","product":{"name":"FreeBSD Project FreeBSD OS 14.4 SA-26:73/caroot-14.4.patch","product_id":"T061589-fixed","product_identification_helper":{"cpe":"cpe:/o:freebsd:freebsd:14.4__sa-2673caroot-14.4.patch"}}}],"category":"product_name","name":"FreeBSD OS"}],"category":"vendor","name":"FreeBSD Project"}]},"vulnerabilities":[{"product_status":{"known_affected":["T061586","T061587","T061588","T061589","T061582","T061583","T061584","T061585"]},"release_date":"2026-10-20T22:00:00.000+00:00"}]}