vulnerability

FreeBSD: VID-6b90acba-6a0a-11ea-92ab-00163e433440 (CVE-2020-7453): FreeBSD -- Kernel memory disclosure with nested jails

Severity
3
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:N)
Published
Mar 19, 2020
Added
Mar 20, 2020
Modified
Dec 10, 2025

Description

Problem Description: A missing NUL-termination check for the jail_set(2) configration option "osrelease" may return more bytes when reading the jail configuration back with jail_get(2) than were originally set. Impact: For jails with a non-default setting of children.max > 0 ("nested jails") a superuser inside a jail can create a jail and may be able to read and take advantage of exposed kernel memory.

Solutions

freebsd-upgrade-base-12_1-release-p3freebsd-upgrade-base-11_3-release-p7
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.