CVE-2020-7453

MEDIUM Year: 2020
CVSS v3 Score
6.0
Medium
CVSS v2 Score
3.3
Low
Weakness Type
CWE-754
View all →

Vulnerability Description

In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jail_set configuration option "osrelease" may return more bytes with a subsequent jail_get system call allowing a malicious jail superuser with permission to create nested jails to read kernel memory.

Related Vulnerabilities

CVE-2019-11139

MEDIUM
CVSS:6.0(Medium)

Improper conditions check in the voltage modulation interface for some Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.

CWE-7542019

CVE-2018-7287

MEDIUM
CVSS:5.9(Medium)

An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (with a busy loop).

CWE-7542018

CVE-2018-7803

MEDIUM
CVSS:5.9(Medium)

A CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TriStation Emulator V1.2.0, which could cause the emulator to crash when sending a specially crafted pac...

CWE-7542018

CVE-2019-5673

MEDIUM
CVSS:6.1(Medium)

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver (on all versions prior to R28.3) where the ARM System Memory Management Unit (SMMU) improperly checks for a fault condition, causing tra...

CWE-7542019

CVE-2021-27568

MEDIUM
CVSS:5.9(Medium)

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatExceptio...

CWE-7542021

CVE-2022-24323

MEDIUM
CVSS:5.9(Medium)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an...

CWE-7542022