Unrated severityNVD Advisory· Published Jul 9, 2020· Updated Aug 4, 2024

CVE-2020-7458

Description

In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of the heap allocated stack possibly leading to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeBSD/FreeBSDdescription
FreeBSD/FreeBSDllm-fuzzy
Range: 12.1-STABLE before r362281, 11.4-STABLE before r362281, 11.4-RELEASE before p1

Patches

Vulnerability mechanics

References

security.freebsd.org/advisories/FreeBSD-SA-20:18.posix_spawnp.ascmitrex_refsource_MISC
security.netapp.com/advisory/ntap-20200724-0002/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000