Which software versions are affected by CVE-2020-24863?

MidnightBSD versions 1.2.7 and earlier, MidnightBSD versions 1.3 through 2020-08-19, and FreeBSD versions up to 11.4 are affected by CVE-2020-24863.

What is the severity of CVE-2020-24863?

CVE-2020-24863 has a severity score of 5.5, which is considered medium.

How can an attacker exploit CVE-2020-24863?

An attacker can exploit CVE-2020-24863 by triggering an invalid free and crashing the system using a crafted size value in conjunction with an invalid mode.

Where can I find more information about CVE-2020-24863?

You can find more information about CVE-2020-24863 in the following references: [link1], [link2], [link3].

Vulnerability/
CVE-2020-24863

medium

5.5

CWE

787

3/9/2020

11/9/2020

CVE-2020-24863

Q: What is CVE-2020-24863?

CVE-2020-24863 is a memory corruption vulnerability found in the kernel function kern_getfsstat in MidnightBSD and FreeBSD, allowing an attacker to crash the system.

First published: Thu Sep 03 2020(Updated: )

A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Midnightbsd Midnightbsd	<1.2.7
Midnightbsd Midnightbsd	>=1.3<=2020-08-19
FreeBSD FreeBSD	<=11.4

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-24863?
CVE-2020-24863 is a memory corruption vulnerability found in the kernel function kern_getfsstat in MidnightBSD and FreeBSD, allowing an attacker to crash the system.
Which software versions are affected by CVE-2020-24863?
MidnightBSD versions 1.2.7 and earlier, MidnightBSD versions 1.3 through 2020-08-19, and FreeBSD versions up to 11.4 are affected by CVE-2020-24863.
What is the severity of CVE-2020-24863?
CVE-2020-24863 has a severity score of 5.5, which is considered medium.
How can an attacker exploit CVE-2020-24863?
An attacker can exploit CVE-2020-24863 by triggering an invalid free and crashing the system using a crafted size value in conjunction with an invalid mode.
Where can I find more information about CVE-2020-24863?
You can find more information about CVE-2020-24863 in the following references: [link1], [link2], [link3].

collector/nvd-index
agent/references
agent/severity
agent/author
agent/tags
agent/type
agent/weakness
agent/event
agent/description
agent/last-modified-date
agent/remedy
agent/softwarecombine
agent/first-publish-date
vendor/midnightbsd
canonical/midnightbsd midnightbsd
version/midnightbsd midnightbsd/1.3
version/midnightbsd midnightbsd/2020-08-19
vendor/freebsd
canonical/freebsd freebsd
version/freebsd freebsd/11.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.