VYPR
← All advisories
Medium severity5.5NVD Advisory· Published May 13, 2020· Updated Jun 17, 2026

CVE-2020-7455

CVE-2020-7455

Description

In FreeBSD 12.1-STABLE before r360973, 12.1-RELEASE before p5, 11.4-STABLE before r360973, 11.4-BETA1 before p1 and 11.3-RELEASE before p9, the FTP packet handler in libalias incorrectly calculates some packet length allowing disclosure of small amounts of kernel (for kernel NAT) or natd process space (for userspace natd).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • FreeBSD/FreeBSD17 versions
    cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 16 more
    • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
    • (no CPE)range: <=12.1-RELEASE p5, <11.4-STABLE r360973, <11.4-BETA1 p1, <11.3-RELEASE p9
  • FreeBSD/FreeBSD FTP packet handlerdescription
  • FreeBSD/libaliasllm-fuzzy
    Range: <=12.1-RELEASE p5, <11.4-STABLE r360973, <11.4-BETA1 p1, <11.3-RELEASE p9

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.