CVE-2020-25584

Published: Apr 7, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 6.0

Source: NVD

Description

In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser inside a FreeBSD jail configured with the non-default allow.mount permission could cause a race condition between the lookup of ".." and remounting a filesystem, allowing access to filesystem hierarchy outside of the jail.

Affected (23)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Before 11.4
Freebsd Freebsd	From 12.0 to 12.2
Freebsd Freebsd	Version 11.4
Freebsd Freebsd	Version 11.4 beta1
Freebsd Freebsd	Version 11.4 p1
Freebsd Freebsd	Version 11.4 p2
Freebsd Freebsd	Version 11.4 p3
Freebsd Freebsd	Version 11.4 p4
Freebsd Freebsd	Version 11.4 p5
Freebsd Freebsd	Version 11.4 rc1
Freebsd Freebsd	Version 11.4 rc2
Freebsd Freebsd	Version 12.2
Freebsd Freebsd	Version 12.2 p1
Freebsd Freebsd	Version 12.2 p2
Freebsd Freebsd	Version 13.0 beta1
Freebsd Freebsd	Version 13.0 beta2
Freebsd Freebsd	Version 13.0 beta3
Freebsd Freebsd	Version 13.0 beta4
Freebsd Freebsd	Version 13.0 rc1
Freebsd Freebsd	Version 13.0 rc2
Freebsd Freebsd	Version 13.0 rc3
Freebsd Freebsd	Version 13.0 rc4
Freebsd Freebsd	Version 13.0 rc5