CVE-2020-7461
high-risk
Published 2021-03-26
In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.
Do I need to act?
~
9.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.3/10
High
NETWORK
/ LOW complexity
Affected Products (20)
References (4)
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf
58
/ 100
high-risk
Severity
26/34 · High
Exploitability
10/34 · Low
Exposure
22/34 · High