Vulnerability · Published Mar 26, 2021 · Assigned by freebsd

CVE-2020-7462

Medium 5.5

In plain English

A medium-severity security flaw in FreeBSD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.2%top 86.2% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Affected products (as reported)

Vendor	Product	Versions
n/a	FreeBSD	FreeBSD 11.3-RELEASE before p13

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:24.ipv6.asc x_refsource_MISC