CVE-2020-7455

Katalog CVE

CVSS 5.5 · Medium EPSS 0,55%

Kerentanan Missing Release of Resource after Effective Lifetime pada freebsd. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias incorrectly calculates some packet length allowing disclosure of small amounts of kernel (for kernel NAT) or natd process space (for userspace natd).

Rincian

Terbit di NVD

13 Mei 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-772: Missing Release of Resource after Effective Lifetime

EPSS (30 hari)

0,55% peluang dieksploitasi; lebih tinggi dari 44,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:13.libalias.asc advisory vendor
• https://security.netapp.com/advisory/ntap-20200518-0005/ advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-20-661/ advisory pihak ketiga · vdb entry