PT-2020-19594 · Freebsd · Freebsd

Published 2020-07-08 · Updated 2022-01-04 · CVE-2020-7458

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeBSD versions 11.4-RELEASE before p1 FreeBSD versions 11.4-STABLE before r362281 FreeBSD versions 12.1-STABLE before r362281

Description The issue arises from long values in the user-controlled PATH environment variable, which causes posix spawnp to write beyond the end of the heap allocated stack. This could possibly lead to arbitrary code execution.

Recommendations For FreeBSD version 11.4-RELEASE, update to p1 or later. For FreeBSD version 11.4-STABLE, update to r362281 or later. For FreeBSD version 12.1-STABLE, update to r362281 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-7458

FREEBSD-SA-20_18

Affected Products

Freebsd

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-7458 · Security Note
• https://osv.dev/vulnerability/CVE-2020-7458 · Vendor Advisory
• https://security.freebsd.org/advisories/FreeBSD-SA-20:18.posix_spawnp.asc · Vendor Advisory
• https://freebsd.org/security/advisories/FreeBSD-SA-20:18.posix_spawnp.asc · Note
• https://security.netapp.com/advisory/ntap-20200724-0002 · Note