CVE Vulnerabilities

CVE-2020-7467

Improper Privilege Management

Published: Mar 26, 2021 | Modified: Apr 01, 2021
CVSS 3.x
7.6
HIGH
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these instructions was not trapped.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Freebsd Freebsd 11.3 (including) 11.3 (including)
Freebsd Freebsd 11.3-p1 (including) 11.3-p1 (including)
Freebsd Freebsd 11.3-p10 (including) 11.3-p10 (including)
Freebsd Freebsd 11.3-p11 (including) 11.3-p11 (including)
Freebsd Freebsd 11.3-p12 (including) 11.3-p12 (including)
Freebsd Freebsd 11.3-p13 (including) 11.3-p13 (including)
Freebsd Freebsd 11.3-p2 (including) 11.3-p2 (including)
Freebsd Freebsd 11.3-p3 (including) 11.3-p3 (including)
Freebsd Freebsd 11.3-p4 (including) 11.3-p4 (including)
Freebsd Freebsd 11.3-p5 (including) 11.3-p5 (including)
Freebsd Freebsd 11.3-p6 (including) 11.3-p6 (including)
Freebsd Freebsd 11.3-p7 (including) 11.3-p7 (including)
Freebsd Freebsd 11.3-p8 (including) 11.3-p8 (including)
Freebsd Freebsd 11.3-p9 (including) 11.3-p9 (including)
Freebsd Freebsd 11.4 (including) 11.4 (including)
Freebsd Freebsd 11.4-p1 (including) 11.4-p1 (including)
Freebsd Freebsd 11.4-p2 (including) 11.4-p2 (including)
Freebsd Freebsd 11.4-p3 (including) 11.4-p3 (including)
Freebsd Freebsd 12.1 (including) 12.1 (including)
Freebsd Freebsd 12.1-p1 (including) 12.1-p1 (including)
Freebsd Freebsd 12.1-p2 (including) 12.1-p2 (including)
Freebsd Freebsd 12.1-p3 (including) 12.1-p3 (including)
Freebsd Freebsd 12.1-p4 (including) 12.1-p4 (including)
Freebsd Freebsd 12.1-p5 (including) 12.1-p5 (including)
Freebsd Freebsd 12.1-p6 (including) 12.1-p6 (including)
Freebsd Freebsd 12.1-p7 (including) 12.1-p7 (including)
Freebsd Freebsd 12.1-p8 (including) 12.1-p8 (including)
Freebsd Freebsd 12.1-p9 (including) 12.1-p9 (including)
Freebsd Freebsd 12.2 (including) 12.2 (including)

Potential Mitigations

References