CVE-2020-7457
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 33%
from disclosure to weapon0 days
Published on NVDJul 9
metasploitJul 7
exploitation probability
33%top 2% of all CVEs
observed exploitation
nono source reports it
In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS socket option set handler contained a race condition allowing a malicious application to modify memory after being freed, possibly resulting in code execution.
Affected products
n/a · FreeBSD