Vulnerability in FreeBSD
CVE-2020-25582
In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.
Vulnerability class: Race Condition
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.007 (51.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 51st percentile — 51.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000
Affected products
- FreeBSD — versions 11.4, 12.2
- FreeBSD — versions FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8
Weakness classification (CWE)
References
- security.FreeBSD.org/advisories/FreeBSD-SA-21:05.jail_chdir.asc (Vendor Advisory)
- security.netapp.com/advisory/ntap-20210423-0003/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2020-25582?
- CVE-2020-25582 is a high-severity vulnerability in FreeBSD, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 8.7/10. Published 2021-03-26.
- How severe is CVE-2020-25582?
- High severity. CVSS v3 base score is 8.7 out of 10.