vulnerability
FreeBSD: VID-f8b46415-c264-11ea-8659-901b0ef719ab (CVE-2020-7458): FreeBSD -- posix_spawnp(3) buffer overflow
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | Jul 10, 2020 | Jul 11, 2020 | Dec 10, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Jul 10, 2020
Added
Jul 11, 2020
Modified
Dec 10, 2025
Description
Problem Description: posix_spawnp spawns a new thread with a limited stack allocated on the heap before delegating to execvp for the final execution within that thread. execvp would previously make unbounded allocations on the stack, directly proportional to the length of the user-controlled PATH environment variable. Impact: Long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end of stack that was allocated, ultimately overflowing the heap-allocated stack with a direct copy of the value stored in PATH.
Solution
freebsd-upgrade-base-11_4-release-p1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.