VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026

CVE-2020-7464

CVE-2020-7464

Description

In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r365738, 12.1-RELEASE before p10, 11.4-RELEASE before p4, and 11.3-RELEASE before p14, a programming error in the ure(4) device driver caused some Realtek USB Ethernet interfaces to incorrectly report packets with more than 2048 bytes in a single USB transfer as having a length of only 2048 bytes. An adversary can exploit this to cause the driver to misinterpret part of the payload of a large packet as a separate packet, and thereby inject packets across security boundaries such as VLANs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

31
  • FreeBSD/FreeBSD29 versions
    cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 28 more
    • cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p13:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.1:p9:*:*:*:*:*:*
    • cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
  • FreeBSD/FreeBSDdescription
  • FreeBSD/urellm-create
    Range: <=12.2-STABLE before r365730, <=11.4-STABLE before r365738, <=12.1-RELEASE before p10, <=11.4-RELEASE before p4, <=11.3-RELEASE before p14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.