CVE-2020-7453: Medium severity freebsd kernel vulnerability

Published Apr 28, 2020

Updated

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jailset configuration option "osrelease" may return more bytes with a subsequent jailget system call allowing a malicious jail superuser with permission to create nested jails to read kernel memory.

Affected Software

10 affected components

FreeBSD FreeBSD=11.3

FreeBSD FreeBSD=11.3-p1

FreeBSD FreeBSD=11.3-p2

FreeBSD FreeBSD=11.3-p3

FreeBSD FreeBSD=11.3-p4

FreeBSD FreeBSD=11.3-p5

FreeBSD FreeBSD=11.3-p6

FreeBSD FreeBSD=12.1

FreeBSD FreeBSD=12.1-p1

FreeBSD FreeBSD=12.1-p2

Remediation

Patch Available

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:08.jail.asc

Event History

Apr 28, 2020

CVE Published

via MITRE·11:36 PM

Data Sourced

via MITRE·11:36 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-7453?

CVE-2020-7453 has a severity rating of medium due to potential information leakage.

How do I fix CVE-2020-7453?

To fix CVE-2020-7453, upgrade your FreeBSD installation to the patched version 12.1-RELEASE-p3 or 11.3-RELEASE-p7.

Which versions are affected by CVE-2020-7453?

CVE-2020-7453 affects FreeBSD versions 11.3 and 12.1 prior to their respective patched releases.

What systems are impacted by CVE-2020-7453?

CVE-2020-7453 impacts systems running FreeBSD with the jail_set configuration option 'osrelease' in the specified versions.

What is the root cause of CVE-2020-7453?

The root cause of CVE-2020-7453 is a missing null termination check in the jail_set system call that can lead to excess bytes being returned.