High severity8.1NVD Advisory· Published Jul 9, 2020· Updated Jun 17, 2026
CVE-2020-7457
CVE-2020-7457
Description
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS socket option set handler contained a race condition allowing a malicious application to modify memory after being freed, possibly resulting in code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 21 more
- cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*
- (no CPE)range: <12.1-STABLE r359565, <12.1-RELEASE p7, <11.4-STABLE r362975, <11.4-RELEASE p1, <11.3-RELEASE p11
- FreeBSD/FreeBSDdescription
Patches
Vulnerability mechanics
References
3- security.freebsd.org/advisories/FreeBSD-SA-20:20.ipv6.ascnvdPatchVendor Advisory
- packetstormsecurity.com/files/158695/FreeBSD-ip6_setpktopt-Use-After-Free-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20200724-0002/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.