High severity7.5NVD Advisory· Published Apr 7, 2021· Updated Jun 17, 2026
CVE-2020-25584
CVE-2020-25584
Description
In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser inside a FreeBSD jail configured with the non-default allow.mount permission could cause a race condition between the lookup of ".." and remounting a filesystem, allowing access to filesystem hierarchy outside of the jail.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*range: <11.4
- cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:13.0:rc5:*:*:*:*:*:*
- (no CPE)range: <13.0-STABLE n245118, <12.2-STABLE r369552, <11.4-STABLE r369560, <13.0-RC5 p1, <12.2-RELEASE p6, <11.4-RELEASE p9
Patches
Vulnerability mechanics
References
2- security.freebsd.org/advisories/FreeBSD-SA-21:10.jail_mount.ascnvdVendor Advisory
- security.netapp.com/advisory/ntap-20210423-0009/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.