vulnerability

FreeBSD: VID-0cc7e547-6a0a-11ea-92ab-00163e433440 (CVE-2020-7452): FreeBSD -- Incorrect user-controlled pointer use in epair

Try Surface Command
Back to search
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Mar 19, 2020
Added
Mar 20, 2020
Modified
Dec 10, 2025

Description

Problem Description: Incorrect use of a potentially user-controlled pointer in the kernel allowed vnet jailed users to panic the system and potentially execute aribitrary code in the kernel. Impact: Users with root level access (or the PRIV_NET_IFCREATE privilege) can panic the system, or potentially escape the jail or execute arbitrary code with kernel priviliges.

Solutions

freebsd-upgrade-base-12_1-release-p3freebsd-upgrade-base-11_3-release-p7

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today