VYPR
← All advisories
High severity7.3NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026

CVE-2020-7461

CVE-2020-7461

Description

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

29
  • FreeBSD/FreeBSDdescription
  • FreeBSD/FreeBSD25 versions
    cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 24 more
    • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*
  • Siemens Foundation/Simatic Rf350m Firmware
    cpe:2.3:o:siemens:simatic_rf350m_firmware:*:*:*:*:*:*:*:*
  • Siemens Foundation/Simatic Rf650m Firmware
    cpe:2.3:o:siemens:simatic_rf650m_firmware:*:*:*:*:*:*:*:*
  • FreeBSD/dhclientllm-create
    Range: <12.1-RELEASE p9, <11.4-RELEASE p3, <11.3-RELEASE p13, <12.1-STABLE r365010, <11.4-STABLE r365011

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.