ISOMAN

CVE

CVE-2020-24863

A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
MidnightBSD4.0.5 amd64 bootonlyunknownsource
MidnightBSD4.0.5 amd64 disc1unknownsource
MidnightBSD4.0.5 amd64 memstickunknownsource
MidnightBSD4.0.5 amd64 mini-memstickunknownsource
MidnightBSD4.0.5 i386 bootonlyunknownsource
MidnightBSD4.0.5 i386 disc1unknownsource
MidnightBSD4.0.5 i386 memstickunknownsource
MidnightBSD4.0.5 i386 mini-memstickunknownsource
MidnightBSD4.0.6 amd64 bootonlyunknownsource
MidnightBSD4.0.6 amd64 disc1unknownsource
MidnightBSD4.0.6 amd64 memstickunknownsource
MidnightBSD4.0.6 amd64 mini-memstickunknownsource
MidnightBSD4.0.6 i386 bootonlyunknownsource
MidnightBSD4.0.6 i386 disc1unknownsource
MidnightBSD4.0.6 i386 memstickunknownsource
MidnightBSD4.0.6 i386 mini-memstickunknownsource
MidnightBSD4.0.7 amd64 bootonlyunknownsource
MidnightBSD4.0.7 amd64 disc1unknownsource
MidnightBSD4.0.7 amd64 memstickunknownsource
MidnightBSD4.0.7 amd64 mini-memstickunknownsource
MidnightBSD4.0.7 i386 bootonlyunknownsource
MidnightBSD4.0.7 i386 disc1unknownsource
MidnightBSD4.0.7 i386 memstickunknownsource
MidnightBSD4.0.7 i386 mini-memstickunknownsource

References

  1. http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:01.txt
  2. https://github.com/MidnightBSD/src/blob/1691c07ff4f27b97220a5d65e217341e477f4014/sys/kern/vfs_syscalls.c
  3. https://www.freebsd.org/security/advisories/FreeBSD-EN-20:18.getfsstat.asc
  4. https://www.midnightbsd.org/notes/
  5. http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:01.txt
  6. https://github.com/MidnightBSD/src/blob/1691c07ff4f27b97220a5d65e217341e477f4014/sys/kern/vfs_syscalls.c
  7. https://www.freebsd.org/security/advisories/FreeBSD-EN-20:18.getfsstat.asc
  8. https://www.midnightbsd.org/notes/