Vulnerability Description
In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 11.4 |
| Netapp | Clustered Data Ontap | - |
Related Weaknesses (CWE)
References
- https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.ascVendor Advisory
- https://security.netapp.com/advisory/ntap-20210720-0001/Third Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.ascVendor Advisory
- https://security.netapp.com/advisory/ntap-20210720-0001/Third Party Advisory
FAQ
What is CVE-2020-7469?
CVE-2020-7469 is a vulnerability with a CVSS score of 7.5 (HIGH). In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the...
How severe is CVE-2020-7469?
CVE-2020-7469 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7469?
Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd, Netapp Clustered Data Ontap.