Unrated severityNVD Advisory· Published Mar 26, 2021· Updated Aug 4, 2024

CVE-2020-25582

Description

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDdescription
FreeBSD/FreeBSDllm-fuzzy
Range: <12.2-RELEASE p4 (incl. 12.2-STABLE before r369334) and <11.4-RELEASE p8 (incl. 11.4-STABLE before r369335)

Patches

Vulnerability mechanics

References

security.freebsd.org/advisories/FreeBSD-SA-21:05.jail_chdir.ascmitrex_refsource_MISC
security.netapp.com/advisory/ntap-20210423-0003/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000