CVE-2020-7456

Опубликовано: 09 июн. 2020

Источник: nvd

CVSS3: 6.8

CVSS2: 7.2

EPSS Низкий

Описание

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with physical access to a USB port to be able to use a specially crafted USB device to gain kernel or user-space code execution.

Ссылки

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:17.usb.asc
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20200625-0005/
Third Party Advisory
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:17.usb.asc
Patch
Vendor Advisory
https://security.netapp.com/advisory/ntap-20200625-0005/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*

cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00153

Низкий

6.8 Medium

CVSS3

7.2 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2020-7456

CVSS3: 6.8

debian

больше 5 лет назад

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-ST ...

GHSA-g86x-jhxw-c6c2

github

больше 3 лет назад