CVE-2020-25582

Published Mar 26, 2021

Last updated 2 years ago

CVSS high 8.7

Overview

Description: In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.
Source: secteam@freebsd.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 8.7
Impact score: 5.8
Exploitability score: 2.3
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 8.5
Impact score: 9.2
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:C/I:C/A:N

Weaknesses

nvd@nist.gov: CWE-362

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C04EE177-C7D1-4049-B680-F961A27C677F"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "218AF216-7B03-4C02-B55F-2316AF14074B"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "33266717-0359-4243-868B-B84436E2A89E"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "99965487-D5FD-4507-A43B-F241FEEA5237"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "050F0B6A-4674-45E9-A079-60A68CFA4D25"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          },
          {
            "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F084CAB-D138-4BF6-ABC2-2314F0FDE0D1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References