PT-2020-15723 · Freebsd+1 · Freebsd+1

Published 2020-09-03 · Updated 2020-09-11 · CVE-2020-24385

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MidnightBSD versions prior to 1.2.6 MidnightBSD version 1.3 before August 2020 FreeBSD versions prior to 7

Description A NULL pointer dereference was found in the Linux emulation layer, allowing attackers to crash the running kernel. The issue arises during binary interaction when td->td emuldata in sys/compat/linux/linux emul.h is not initialized and returns NULL from em find().

Recommendations For MidnightBSD versions prior to 1.2.6, update to version 1.2.6 or later. For MidnightBSD version 1.3 before August 2020, ensure the system is updated to a version from August 2020 or later. For FreeBSD versions prior to 7, update to version 7 or later.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2020-24385

Affected Products

Freebsd

Midnightbsd

References · 4

• http://midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:02.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-24385 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24385 · Vendor Advisory
• https://midnightbsd.org/notes · Vendor Advisory