CVE-2020-7454

Katalog CVE

CVSS 9.8 · Critical EPSS 2,7%

Kerentanan Improper Input Validation pada freebsd. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

In FreeBSD 12.1-STABLE before r360971, 12.1-RELEASE before p5, 11.4-STABLE before r360971, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, libalias does not properly validate packet length resulting in modules causing an out of bounds read/write condition if no checking was built into the module.

Rincian

Terbit di NVD

13 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-787: Out-of-bounds Write

EPSS (30 hari)

2,7% peluang dieksploitasi; lebih tinggi dari 85,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:12.libalias.asc advisory vendor
• https://security.netapp.com/advisory/ntap-20200518-0005/ advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-20-659/ advisory pihak ketiga · vdb entry
• https://www.zerodayinitiative.com/advisories/ZDI-20-660/ advisory pihak ketiga · vdb entry