CVE-2020-25581 - Vulnerability Details

Vendors	Products
Freebsd	Freebsd

Link	Providers
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc
https://security.netapp.com/advisory/ntap-20210423-0006/

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "FreeBSD", "vendor": "n/a", "versions": [{"status": "affected", "version": "FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes."}], "problemTypes": [{"descriptions": [{"description": "Race Condition", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-04-23T05:06:22", "orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://security.netapp.com/advisory/ntap-20210423-0006/"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secteam@freebsd.org", "ID": "CVE-2020-25581", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "FreeBSD", "version": {"version_data": [{"version_value": "FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Race Condition"}]}]}, "references": {"reference_data": [{"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc", "refsource": "MISC", "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc"}, {"name": "https://security.netapp.com/advisory/ntap-20210423-0006/", "refsource": "CONFIRM", "url": "https://security.netapp.com/advisory/ntap-20210423-0006/"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T15:33:05.769Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://security.netapp.com/advisory/ntap-20210423-0006/"}]}]}, "cveMetadata": {"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "assignerShortName": "freebsd", "cveId": "CVE-2020-25581", "datePublished": "2021-03-26T20:40:56", "dateReserved": "2020-09-14T00:00:00", "dateUpdated": "2024-08-04T15:33:05.769Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : FreeBSD (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Race Condition (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2021-04-23T05:06:22 (string)

orgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

shortName : freebsd (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secteam@freebsd.org (string)

ID : CVE-2020-25581 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : FreeBSD (string)

version : { »

version_data : [ »

0 : { »

version_value : FreeBSD 12.2-RELEASE before p4, 11.4-RELEASE before p8 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Race Condition (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

refsource : MISC (string)

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

}

1 : { »

name : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

refsource : CONFIRM (string)

url : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T15:33:05.769Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

}

1 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

assignerShortName : freebsd (string)

cveId : CVE-2020-25581 (string)

datePublished : 2021-03-26T20:40:56 (string)

dateReserved : 2020-09-14T00:00:00 (string)

dateUpdated : 2024-08-04T15:33:05.769Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*", "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*", "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*", "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*", "matchCriteriaId": "C04EE177-C7D1-4049-B680-F961A27C677F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*", "matchCriteriaId": "218AF216-7B03-4C02-B55F-2316AF14074B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*", "matchCriteriaId": "33266717-0359-4243-868B-B84436E2A89E", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*", "matchCriteriaId": "99965487-D5FD-4507-A43B-F241FEEA5237", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*", "matchCriteriaId": "050F0B6A-4674-45E9-A079-60A68CFA4D25", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*", "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*", "matchCriteriaId": "62A178A3-6A52-4981-9A27-FB07AD8AF778", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*", "matchCriteriaId": "54A487B1-E5CE-4C76-87E8-518D24C5D86D", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*", "matchCriteriaId": "9F084CAB-D138-4BF6-ABC2-2314F0FDE0D1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes."}, {"lang": "es", "value": "En FreeBSD versiones 12.2-STABLE anteriores a r369312, 11.4-STABLE anteriores a r369313, 12.2-RELEASE anteriores a p4 y 11.4-RELEASE anteriores a p8, debido a una condici\u00f3n de carrera en la implementaci\u00f3n de jail_remove(2), puede cometer un fallo al eliminar algunos de los procesos."}], "id": "CVE-2020-25581", "lastModified": "2024-11-21T05:18:10.030", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 8.5, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-03-26T21:15:12.850", "references": [{"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20210423-0006/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20210423-0006/"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:* (string)

matchCriteriaId : 4A865EA1-01D7-4E5A-9D13-80780F8A9D7A (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:* (string)

matchCriteriaId : 9FCA6A72-2A72-45FD-A43D-B5BF7C329121 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:* (string)

matchCriteriaId : 90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:* (string)

matchCriteriaId : C04EE177-C7D1-4049-B680-F961A27C677F (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:* (string)

matchCriteriaId : 218AF216-7B03-4C02-B55F-2316AF14074B (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:* (string)

matchCriteriaId : 33266717-0359-4243-868B-B84436E2A89E (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:* (string)

matchCriteriaId : 99965487-D5FD-4507-A43B-F241FEEA5237 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:* (string)

matchCriteriaId : 050F0B6A-4674-45E9-A079-60A68CFA4D25 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* (string)

matchCriteriaId : 73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* (string)

matchCriteriaId : 62A178A3-6A52-4981-9A27-FB07AD8AF778 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* (string)

matchCriteriaId : 54A487B1-E5CE-4C76-87E8-518D24C5D86D (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:* (string)

matchCriteriaId : 9F084CAB-D138-4BF6-ABC2-2314F0FDE0D1 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In FreeBSD 12.2-STABLE before r369312, 11.4-STABLE before r369313, 12.2-RELEASE before p4 and 11.4-RELEASE before p8 due to a race condition in the jail_remove(2) implementation, it may fail to kill some of the processes. (string)

}

1 : { »

lang : es (string)

value : En FreeBSD versiones 12.2-STABLE anteriores a r369312, 11.4-STABLE anteriores a r369313, 12.2-RELEASE anteriores a p4 y 11.4-RELEASE anteriores a p8, debido a una condición de carrera en la implementación de jail_remove(2), puede cometer un fallo al eliminar algunos de los procesos. (string)

}

]

id : CVE-2020-25581 (string)

lastModified : 2024-11-21T05:18:10.030 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : MEDIUM (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : COMPLETE (string)

baseScore : 8.5 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:N/AC:M/Au:S/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 6.8 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2021-03-26T21:15:12.850 (string)

references : [ »

0 : { »

source : secteam@freebsd.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

}

1 : { »

source : secteam@freebsd.org (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-21:04.jail_remove.asc (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

]

url : https://security.netapp.com/advisory/ntap-20210423-0006/ (string)

}

]

sourceIdentifier : secteam@freebsd.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-362 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Medium

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object