CVE-2020-7458

In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of the heap allocated stack possibly leading to arbitrary code execution.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*

History

04 Jan 2022, 16:39

Type Values Removed Values Added
References (CONFIRM) https://security.netapp.com/advisory/ntap-20200724-0002/ - (CONFIRM) https://security.netapp.com/advisory/ntap-20200724-0002/ - Third Party Advisory

Information

Published : 2020-07-09 14:15

Updated : 2023-12-10 13:27


NVD link : CVE-2020-7458

Mitre link : CVE-2020-7458

CVE.ORG link : CVE-2020-7458


JSON object : View

Products Affected

freebsd

  • freebsd
CWE
CWE-787

Out-of-bounds Write