← Back

CVE-2020-7456

nvd nist
Published: Jun 9, 2020Modified: Nov 21, 2024

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with physical access to a USB port to be able to use a specially crafted USB device to gain kernel or user-space code execution.

Affected (19)

Freebsd
1 product
Freebsd
Netapp
1 product
Clustered Data Ontap
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Freebsd
Freebsd
Version 11.3
Freebsd
Version 11.3 p1
Freebsd
Version 11.3 p2
Freebsd
Version 11.3 p3
Freebsd
Version 11.3 p4
Freebsd
Version 11.3 p5
Freebsd
Version 11.3 p6
Freebsd
Version 11.3 p7
Freebsd
Version 11.3 p8
Freebsd
Version 11.3 p9
Freebsd
Version 11.4 rc1
Freebsd
Version 11.4 rc2
Freebsd
Version 12.1
Freebsd
Version 12.1 p1
Freebsd
Version 12.1 p2
Freebsd
Version 12.1 p3
Freebsd
Version 12.1 p4
Freebsd
Version 12.1 p5
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Clustered Data Ontap
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: secteam@freebsd.org
PatchVendor Advisory
Source: secteam@freebsd.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.