Skip to content
Connect AISign inSign up free
CVE-2020-7460Not scoredCWE-367

CVE-2020-7460: FreeBSD vulnerability

Freebsd · FreeBSD

Affected: FreeBSD · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.7%probability of exploitation in the next 30 days
53rd percentile
050100

Higher than 53% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

In FreeBSD 12.1-STABLE before r363918, 12.1-RELEASE before p8, 11.4-STABLE before r363919, 11.4-RELEASE before p2, and 11.3-RELEASE before p12, the sendmsg system call in the compat32 subsystem on 64-bit platforms has a time-of-check to time-of-use vulnerability allowing a mailcious userspace program to modify control message headers after they were validation.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • FreeBSDFreeBSD 12.1-RELEASE before p8, 11.4-RELEASE before p2, 11.…

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Freebsd
Published
August 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2020-7460 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References