What’s Vulnerable › Vulnerabilities

CVE-2020-7461

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-03-26 · updated 2026-06-17
• Weakness: CWE-787

Description

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.

Affected products

• FreeBSD: 11.3, 11.3-p1, 11.3-p10, 11.3-p11, 11.3-p12, 11.3-p2 (+19)
• Siemens Simatic Rf350M Firmware: all versions
• Siemens Simatic Rf650M Firmware: all versions

References

• https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf
• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc
• https://cert-portal.siemens.com/productcert/pdf/ssa-288459.pdf
• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:26.dhclient.asc

Get alerted when CVE-2020-7461 or the next vulnerability affects your stack