vulnerability
FreeBSD: VID-6b90acba-6a0a-11ea-92ab-00163e433440 (CVE-2020-7453): FreeBSD -- Kernel memory disclosure with nested jails
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:L/AC:M/Au:N/C:P/I:P/A:N) | Mar 19, 2020 | Mar 20, 2020 | Dec 10, 2025 |
Severity
3
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:N)
Published
Mar 19, 2020
Added
Mar 20, 2020
Modified
Dec 10, 2025
Description
Problem Description: A missing NUL-termination check for the jail_set(2) configration option "osrelease" may return more bytes when reading the jail configuration back with jail_get(2) than were originally set. Impact: For jails with a non-default setting of children.max > 0 ("nested jails") a superuser inside a jail can create a jail and may be able to read and take advantage of exposed kernel memory.
Solutions
freebsd-upgrade-base-12_1-release-p3freebsd-upgrade-base-11_3-release-p7
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.