CVE-2020-7458: Buffer Overflow
Published Jul 9, 2020
·Updated
In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posixspawnp to write beyond the end of the heap allocated stack possibly leading to arbitrary code execution.
Affected Software
3 affected components
FreeBSD FreeBSD=11.4
FreeBSD FreeBSD=11.4-beta1
FreeBSD FreeBSD=12.1
Remediation
Event History
Jul 9, 2020
CVE Published
via MITRE·01:47 PM
Data Sourced
via MITRE·01:47 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-7458?
The severity of CVE-2020-7458 is critical with a CVSS score of 9.8.
2
What is the affected software for CVE-2020-7458?
The affected software for CVE-2020-7458 is FreeBSD versions 11.4 and 12.1.
3
How does CVE-2020-7458 impact FreeBSD?
CVE-2020-7458 in FreeBSD can allow an attacker to execute arbitrary code by exploiting a stack-based buffer overflow in posix_spawnp.
4
Are there any patches or updates available for CVE-2020-7458?
Yes, patches and updates are available for CVE-2020-7458 from the FreeBSD project.
5
Where can I find more information about CVE-2020-7458?
More information about CVE-2020-7458 can be found in the FreeBSD-SA-20:18 advisory.