Lucene search

[email protected]CVE-2020-7460

HistoryAug 06, 2020 - 5:15 p.m.

CVE-2020-7460

2020-08-0617:15:11

CWE-367

[email protected]

web.nvd.nist.gov

cve-2020-7460

freebsd

time-of-check

time-of-use

vulnerability

sendmsg

compat32

nvd

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.9%

JSON

In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, the sendmsg system call in the compat32 subsystem on 64-bit platforms has a time-of-check to time-of-use vulnerability allowing a mailcious userspace program to modify control message headers after they were validation.

Affected configurations

NVD

Node

freebsdfreebsdMatch11.3-

freebsdfreebsdMatch11.3p1

freebsdfreebsdMatch11.3p10

freebsdfreebsdMatch11.3p11

freebsdfreebsdMatch11.3p2

freebsdfreebsdMatch11.3p3

freebsdfreebsdMatch11.3p4

freebsdfreebsdMatch11.3p5

freebsdfreebsdMatch11.3p6

freebsdfreebsdMatch11.3p7

freebsdfreebsdMatch11.3p8

freebsdfreebsdMatch11.3p9

freebsdfreebsdMatch11.4-

freebsdfreebsdMatch11.4p1

freebsdfreebsdMatch12.1-

freebsdfreebsdMatch12.1p1

freebsdfreebsdMatch12.1p2

freebsdfreebsdMatch12.1p3

freebsdfreebsdMatch12.1p4

freebsdfreebsdMatch12.1p6

freebsdfreebsdMatch12.1p7

CPENameOperatorVersion
freebsd:freebsdfreebsdeq11.3
freebsd:freebsdfreebsdeq11.4
freebsd:freebsdfreebsdeq12.1

CPE	Name	Operator	Version
freebsd:freebsd	freebsd	eq	11.3
freebsd:freebsd	freebsd	eq	11.4
freebsd:freebsd	freebsd	eq	12.1

CNA Affected

[
  {
    "product": "FreeBSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FreeBSD 12.1-RELEASE before p8, 11.4-RELEASE before p2, 11.3-RELEASE before p12"
      }
    ]
  }
]