CVE-2020-7469

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 04-06-2021 02:15

Last modified: - 31-05-2022 05:54

Total changes: - 4

Description

In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

vendor=freebsd AND product=freebsd AND version=12.1 AND update=-

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p2

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p3

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p4

vendor=freebsd AND product=freebsd AND version=11.4 AND update=beta1

vendor=freebsd AND product=freebsd AND version=11.4 AND update=-

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p5

vendor=freebsd AND product=freebsd AND version=11.4 AND update=rc2

vendor=freebsd AND product=freebsd AND version=11.4 AND update=rc1

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p6

vendor=freebsd AND product=freebsd AND version=11.4 AND update=p1

vendor=freebsd AND product=freebsd AND version=11.4 AND update=p2

vendor=freebsd AND product=freebsd AND version=11.4 AND update=p3

vendor=freebsd AND product=freebsd AND version=11.4 AND update=p4

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p10

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p7

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p8

vendor=freebsd AND product=freebsd AND version=12.1 AND update=p9

vendor=freebsd AND product=freebsd AND version=12.2 AND update=-

vendor=netapp AND product=clustered_data_ontap AND version=-

Reference

Keywords

CVE-2020-7469

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2020-7469

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures