FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
f8b46415-c264-11ea-8659-901b0ef719ab	FreeBSD -- posix_spawnp(3) buffer overflow Problem Description: posix_spawnp spawns a new thread with a limited stack allocated on the heap before delegating to execvp for the final execution within that thread. execvp would previously make unbounded allocations on the stack, directly proportional to the length of the user-controlled PATH environment variable. Impact: Long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of stack that was allocated, ultimately overflowing the heap-allocated stack with a direct copy of the value stored in PATH. Discovery 2020-07-09 Entry 2020-07-10 FreeBSD ge 11.4 lt 11.4_1 CVE-2020-7458 SA-20:18.posix_spawnp

VuXML ID

Description

f8b46415-c264-11ea-8659-901b0ef719ab

FreeBSD -- posix_spawnp(3) buffer overflow

Problem Description:

posix_spawnp spawns a new thread with a limited stack allocated on the heap before delegating to execvp for the final execution within that thread.

execvp would previously make unbounded allocations on the stack, directly proportional to the length of the user-controlled PATH environment variable.

Impact:

Long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of stack that was allocated, ultimately overflowing the heap-allocated stack with a direct copy of the value stored in PATH.

Discovery 2020-07-09
Entry 2020-07-10
FreeBSD

ge 11.4 lt 11.4_1

CVE-2020-7458
SA-20:18.posix_spawnp