Critical severity9.8NVD Advisory· Published Jul 9, 2020· Updated Jun 17, 2026
CVE-2020-7458
CVE-2020-7458
Description
In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of the heap allocated stack possibly leading to arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- FreeBSD/FreeBSDdescription
<12.1-STABLE before r362281, <11.4-STABLE before r362281, <11.4-RELEASE before p1+ 3 more
- (no CPE)range: <12.1-STABLE before r362281, <11.4-STABLE before r362281, <11.4-RELEASE before p1
- cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- security.freebsd.org/advisories/FreeBSD-SA-20:18.posix_spawnp.ascnvdPatchVendor Advisory
- security.netapp.com/advisory/ntap-20200724-0002/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.