FreeBSD
En bref
- Source
- NVD
- EPSS
- EPSS 0.55 % · centile 46 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- freebsd
- Statut NVD
- Modified
Description
In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias incorrectly calculates some packet length allowing disclosure of small amounts of kernel (for kernel NAT) or natd process space (for userspace natd).
Faiblesses (CWE)
- CWE-772 — Ressource non libérée après sa durée de vie utile
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | LOW 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2020-28581
- GCVE · GCVE-0-2020-7455
Configurations affectées (CPE NVD)
cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| FreeBSD | affected FreeBSD 12.1-RELEASE before p5, 11.4-BETA1 before p1, and 11.3-RELEASE before p9 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |