PT-2021-11160 · Freebsd · Freebsd

Published 2021-03-29 · Updated 2021-06-03 · CVE-2020-25583

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: FreeBSD versions 12.2-STABLE before r368250 FreeBSD versions 11.4-STABLE before r368253 FreeBSD versions 12.2-RELEASE before p1 FreeBSD versions 12.1-RELEASE before p11 FreeBSD versions 11.4-RELEASE before p5

Description: The issue arises when processing a DNSSL option, where rtsold(8) decodes domain name labels according to the encoding specified in RFC 1035. In this process, the first octet of each label contains the label's length. However, rtsold(8) fails to validate these label lengths correctly, which can lead to an overflow of the destination buffer.

Recommendations: For FreeBSD versions 12.2-STABLE before r368250, update to a version after r368250 to resolve the issue. For FreeBSD versions 11.4-STABLE before r368253, update to a version after r368253 to resolve the issue. For FreeBSD versions 12.2-RELEASE before p1, update to a version after p1 to resolve the issue. For FreeBSD versions 12.1-RELEASE before p11, update to a version after p11 to resolve the issue. For FreeBSD versions 11.4-RELEASE before p5, update to a version after p5 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-25583

Affected Products

Freebsd

References · 7

• https://security.freebsd.org/advisories/FreeBSD-SA-20:32.rtsold.asc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25583 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25583 · Security Note
• https://t.me/cvenotify/12261 · Telegram Post
• https://freebsd.org/security/advisories/FreeBSD-SA-20:32.rtsold.asc · Note
• https://t.me/cvenotify/13577 · Telegram Post
• https://security.netapp.com/advisory/ntap-20210423-0004 · Note