FreeBSD
At a glance
- Source
- NVD
- EPSS
- EPSS 1.22 % · percentile 69 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- freebsd
- NVD status
- Modified
Description
In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.
Weaknesses (CWE)
- CWE-416 — Use After Free
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2020-28595
- GCVE · GCVE-0-2020-7469
CERT-FR advisories
- CERTFR-2021-AVI-065 — Multiples vulnérabilités dans les produits Stormshield · cert.ssi.gouv.fr
- CERTFR-2021-AVI-051 — Multiples vulnérabilités dans les produits Stormshield · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p10:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p9:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| FreeBSD | affected FreeBSD 12.2-RELEASE before p1, 12.1-RELEASE before p11, 11.4-RELEASE before p5 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |