cve.bz

CVE-2020-7457

8.1 highEPSS 33%

High (8.1) in freebsd freebsd. EPSS 33% chance of exploitation in the next 30 days.

In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS socket option set handler contained a race condition allowing a malicious application to modify memory after being freed, possibly resulting in code execution.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
33% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWEs
CWE-362, CWE-416, CWE-662
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON