CVE-2020-7452

Katalog CVE

CVSS 9.1 · Critical EPSS 1,8%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada freebsd. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

In FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r357489, and 11.3-RELEASE before 11.3-RELEASE-p7, incorrect use of a user-controlled pointer in the epair virtual network module allowed vnet jailed privileged users to panic the host system and potentially execute arbitrary code in the kernel.

Rincian

Terbit di NVD

29 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:07.epair.asc patch · advisory vendor