6.8

CVE-2020-7459

In FreeBSD 12.1-STABLE before r362166, 12.1-RELEASE before p8, 11.4-STABLE before r362167, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, missing length validation code common to mulitple USB network drivers allows a malicious USB device to write beyond the end of an allocated network packet buffer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freebsd ≫ Freebsd Version11.3 Update-
Freebsd ≫ Freebsd Version11.3 Updatep1
Freebsd ≫ Freebsd Version11.3 Updatep10
Freebsd ≫ Freebsd Version11.3 Updatep11
Freebsd ≫ Freebsd Version11.3 Updatep2
Freebsd ≫ Freebsd Version11.3 Updatep3
Freebsd ≫ Freebsd Version11.3 Updatep4
Freebsd ≫ Freebsd Version11.3 Updatep5
Freebsd ≫ Freebsd Version11.3 Updatep6
Freebsd ≫ Freebsd Version11.3 Updatep7
Freebsd ≫ Freebsd Version11.3 Updatep8
Freebsd ≫ Freebsd Version11.3 Updatep9
Freebsd ≫ Freebsd Version11.4 Update-
Freebsd ≫ Freebsd Version11.4 Updatep1
Freebsd ≫ Freebsd Version12.1 Update-
Freebsd ≫ Freebsd Version12.1 Updatep1
Freebsd ≫ Freebsd Version12.1 Updatep2
Freebsd ≫ Freebsd Version12.1 Updatep3
Freebsd ≫ Freebsd Version12.1 Updatep4
Freebsd ≫ Freebsd Version12.1 Updatep6
Freebsd ≫ Freebsd Version12.1 Updatep7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.19
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.