CVE-2020-25577 Memory corruption in FreeBSD
A buffer overflow in FreeBSD's rtsold allows attackers to cause denial of service or execute code via malformed RDNSS packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-25577?
CVE-2020-25577 is a critical memory corruption vulnerability in Freebsd Freebsd, published on 29 Mar 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 rtsold(8) does not verify that the RDNSS option does not extend past the end of the received packet before processing its contents. While the kernel currently ignores such malformed packets, it passes them to userspace programs. Any programs expecting the kernel to do validation may be vulnerable to an overflow.
Weakness: CWE-120
Which versions are affected by CVE-2020-25577?
It affects 1 product.
Products include Freebsd Freebsd.
How do I fix CVE-2020-25577?
No fix has been published for CVE-2020-25577 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-25577 being exploited?
There is no known exploitation of CVE-2020-25577 in the wild and no public exploit code.
Other vulnerabilities in Freebsd Freebsd
Sources
Also known as GHSA-r8gv-c2f3-665p.