Unrated severityNVD Advisory· Published Mar 29, 2021· Updated Aug 4, 2024

CVE-2020-25583

Description

In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains the label's length. rtsold(8) did not validate label lengths correctly and could overflow the destination buffer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDdescription
FreeBSD/FreeBSDllm-fuzzy
Range: <r368250 (12.2-STABLE before r368250), <r368253 (11.4-STABLE before r368253), <p1 (12.2-RELEASE before p1), <p11 (12.1-RELEASE before p11), <p5 (11.4-RELEASE before p5)

Patches

Vulnerability mechanics

References

security.freebsd.org/advisories/FreeBSD-SA-20:32.rtsold.ascmitrex_refsource_MISC
security.netapp.com/advisory/ntap-20210423-0004/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000