Skip to content
OpenAdvisories
Unscored CVE-2020-25582 EUVD-2020-18262GHSA-2jmw-7gh4-3h48

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such a…

Published Mar 26, 2021 · Updated Aug 4, 2024 · Assigned by freebsd

Description

In FreeBSD 12.2-STABLE before r369334, 11.4-STABLE before r369335, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 when a process, such as jexec(8) or killall(1), calls jail_attach(2) to enter a jail, the jailed root can attach to it using ptrace(2) before the current working directory is changed.

Affected products

VendorProductAffectedFixed
— FreeBSD FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8 —

References