Race condition in FreeBSD - CVE-2020-7460
Published: August 7, 2020
Vulnerability identifier: #VU34100
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2020-7460
CWE-ID: CWE-367
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: FreeBSD Foundation
Affected software:
FreeBSD
FreeBSD
Detailed vulnerability description
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to the sendmsg system call in the compat32 subsystem on 64-bit platforms has a time-of-check to time-of-use issue. A local user can tun a specially crafted program from userspace and modify control message headers after they are validation.
Successful exploitation of the vulnerability may allow an attacker to escalate privileges on the system.
How to mitigate CVE-2020-7460
Install updates from vendor's website.