« Volver al listado

CVE-2020-25582

Estado: ModificadaAlta (8.7)—

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freebsd — Freebsd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-25582",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 9.2,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.7,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 2.3
      }
    ]
  },
  "affected": [
    {
      "source": "secteam@freebsd.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "FreeBSD",
          "versions": [
            {
              "status": "affected",
              "version": "FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-03-26T21:15:12.957",
  "references": [
    {
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:05.jail_chdir.asc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secteam@freebsd.org"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210423-0003/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secteam@freebsd.org"
    },
    {
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:05.jail_chdir.asc",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20210423-0003/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed."
    },
    {
      "lang": "es",
      "value": "En FreeBSD versiones 12.2-STABLE anteriores a r369334, 11.4-STABLE anteriores a r369335, 12.2-RELEASE anteriores a p4 y 11.4-RELEASE anteriores a p8, cuando un proceso, como jexec(8) o killall(1), llama a jail_attach(2) para ingresar una jail, la root enjaulada puede adjuntarse a él usando ptrace(2) antes de que se cambie el directorio de trabajo actual."
    }
  ],
  "lastModified": "2026-06-17T03:06:55.843",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C04EE177-C7D1-4049-B680-F961A27C677F"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "218AF216-7B03-4C02-B55F-2316AF14074B"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33266717-0359-4243-868B-B84436E2A89E"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99965487-D5FD-4507-A43B-F241FEEA5237"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "050F0B6A-4674-45E9-A079-60A68CFA4D25"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62A178A3-6A52-4981-9A27-FB07AD8AF778"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
            },
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9F084CAB-D138-4BF6-ABC2-2314F0FDE0D1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secteam@freebsd.org"
}