Vulnerabilities > CVE-2020-7462 - Use After Free vulnerability in Freebsd 11.3/11.4

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
freebsd
CWE-416

Summary

In 11.4-PRERELEASE before r360733 and 11.3-RELEASE before p13, improper mbuf handling in the kernel causes a use-after-free bug by sending IPv6 Hop-by-Hop options over the loopback interface. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Vulnerable Configurations

Part Description Count
OS
Freebsd
14

Common Weakness Enumeration (CWE)