« Volver al listado

CVE-2020-25581

Estado: ModificadaAlta (7.5)—

In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freebsd — Freebsd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-25581",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.6
      }
    ]
  },
  "affected": [
    {
      "source": "secteam@freebsd.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "FreeBSD",
          "versions": [
            {
              "status": "affected",
              "version": "FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-03-26T21:15:12.850",
  "references": [
    {
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secteam@freebsd.org"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210423-0006/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secteam@freebsd.org"
    },
    {
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210423-0006/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes."
    },
    {
      "lang": "es",
      "value": "En FreeBSD versiones 12.2-STABLE anteriores a r369312, 11.4-STABLE anteriores a r369313, 12.2-RELEASE anteriores a p4 y 11.4-RELEASE anteriores a p8, debido a una condición de carrera en la implementación de jail_remove(2), puede cometer un fallo al eliminar algunos de los procesos."
    }
  ],
  "lastModified": "2026-06-17T03:06:55.727",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C04EE177-C7D1-4049-B680-F961A27C677F"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "218AF216-7B03-4C02-B55F-2316AF14074B"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33266717-0359-4243-868B-B84436E2A89E"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99965487-D5FD-4507-A43B-F241FEEA5237"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "050F0B6A-4674-45E9-A079-60A68CFA4D25"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62A178A3-6A52-4981-9A27-FB07AD8AF778"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F084CAB-D138-4BF6-ABC2-2314F0FDE0D1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secteam@freebsd.org"
}