CVE-2020-25583

🗓️ 29 Mar 2021 19:53:57Reported by freebsdType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 58 Views

FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains the label's length. rtsold(8) did not validate label lengths correctly and could overflow the destination buffer

Reporter	Title	Published	Views	Family All 8
CNNVD	Freebsd FreeBSD 安全漏洞	29 Mar 202100:00	–	cnnvd
Cvelist	CVE-2020-25583	29 Mar 202119:53	–	cvelist
EUVD	EUVD-2020-18263	7 Oct 202500:30	–	euvd
FreeBSD Advisory	FreeBSD-SA-20:32.rtsold	1 Dec 202000:00	–	freebsd_advisory
NVD	CVE-2020-25583	29 Mar 202120:15	–	nvd
OSV	CVE-2020-25583	29 Mar 202120:15	–	osv
Prion	Buffer overflow	29 Mar 202120:15	–	prion
RedhatCVE	CVE-2020-25583	22 May 202515:22	–	redhatcve

NVD

Node

freebsd freebsdMatch11.3-

freebsd freebsdMatch11.3p1

freebsd freebsdMatch11.3p10

freebsd freebsdMatch11.3p11

freebsd freebsdMatch11.3p12

freebsd freebsdMatch11.3p13

freebsd freebsdMatch11.3p2

freebsd freebsdMatch11.3p3

freebsd freebsdMatch11.3p4

freebsd freebsdMatch11.3p5

freebsd freebsdMatch11.3p6

freebsd freebsdMatch11.3p7

freebsd freebsdMatch11.3p8

freebsd freebsdMatch11.3p9

freebsd freebsdMatch11.4-

freebsd freebsdMatch11.4p1

freebsd freebsdMatch11.4p2

freebsd freebsdMatch11.4p3

freebsd freebsdMatch12.1-

freebsd freebsdMatch12.1p1

freebsd freebsdMatch12.1p2

freebsd freebsdMatch12.1p3

freebsd freebsdMatch12.1p4

freebsd freebsdMatch12.1p5

freebsd freebsdMatch12.1p6

freebsd freebsdMatch12.1p7

freebsd freebsdMatch12.1p8

freebsd freebsdMatch12.1p9

freebsd freebsdMatch12.2-

[
  {
    "product": "FreeBSD",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "FreeBSD 12.2-RELEASE before p1, 12.1-RELEASE before p11, 11.4-RELEASE before p5"
      }
    ]
  }
]

Source	Link
security	www.security.freebsd.org/advisories/FreeBSD-SA-20:32.rtsold.asc
security	www.security.netapp.com/advisory/ntap-20210423-0004/

21 Nov 2024 05:18Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

EPSS0.00477

CWE-120