CVE-2020-7462 : In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf han

In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Published 2021-03-26 21:15:13

Updated 2021-04-02 18:11:51

Source FreeBSD

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2020-7462

Freebsd » Freebsd » Version: 11.3
cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P1
cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P2
cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P3
cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P4
cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P5
cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P6
cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P7
cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P8
cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.4
cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P10
cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P11
cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P12
cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*
Matching versions
Freebsd » Freebsd » Version: 11.3 Update P9
cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2020-7462

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-7462

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	AV:L/AC:L/Au:N/C:N/I:N/A:C	3.9	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-7462

CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-7462

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:24.ipv6.asc

Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-7462

Products affected by CVE-2020-7462

Exploit prediction scoring system (EPSS) score for CVE-2020-7462

CVSS scores for CVE-2020-7462

CWE ids for CVE-2020-7462

References for CVE-2020-7462