CVE-2020-7450 - Vulnerability Details

Vendors	Products
Freebsd	Freebsd

Link	Providers
https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "FreeBSD", "vendor": "n/a", "versions": [{"status": "affected", "version": "12.1-STABLE before r357213"}, {"status": "affected", "version": "12.1-RELEASE before 12.1-RELEASE-p2"}, {"status": "affected", "version": "12.0-RELEASE before 12.0-RELEASE-p13"}, {"status": "affected", "version": "11.3-STABLE before r357214"}, {"status": "affected", "version": "11.3-RELEASE before 11.3-RELEASE-p6"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution."}], "problemTypes": [{"descriptions": [{"description": "Heap-based buffer overflow", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-02-18T15:26:42", "orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secteam@freebsd.org", "ID": "CVE-2020-7450", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "FreeBSD", "version": {"version_data": [{"version_value": "12.1-STABLE before r357213"}, {"version_value": "12.1-RELEASE before 12.1-RELEASE-p2"}, {"version_value": "12.0-RELEASE before 12.0-RELEASE-p13"}, {"version_value": "11.3-STABLE before r357214"}, {"version_value": "11.3-RELEASE before 11.3-RELEASE-p6"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Heap-based buffer overflow"}]}]}, "references": {"reference_data": [{"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc", "refsource": "MISC", "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T09:25:49.035Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc"}]}]}, "cveMetadata": {"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "assignerShortName": "freebsd", "cveId": "CVE-2020-7450", "datePublished": "2020-02-18T15:26:42", "dateReserved": "2020-01-21T00:00:00", "dateUpdated": "2024-08-04T09:25:49.035Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : FreeBSD (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : 12.1-STABLE before r357213 (string)

}

1 : { »

status : affected (string)

version : 12.1-RELEASE before 12.1-RELEASE-p2 (string)

}

2 : { »

status : affected (string)

version : 12.0-RELEASE before 12.0-RELEASE-p13 (string)

}

3 : { »

status : affected (string)

version : 11.3-STABLE before r357214 (string)

}

4 : { »

status : affected (string)

version : 11.3-RELEASE before 11.3-RELEASE-p6 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Heap-based buffer overflow (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2020-02-18T15:26:42 (string)

orgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

shortName : freebsd (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secteam@freebsd.org (string)

ID : CVE-2020-7450 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : FreeBSD (string)

version : { »

version_data : [ »

0 : { »

version_value : 12.1-STABLE before r357213 (string)

}

1 : { »

version_value : 12.1-RELEASE before 12.1-RELEASE-p2 (string)

}

2 : { »

version_value : 12.0-RELEASE before 12.0-RELEASE-p13 (string)

}

3 : { »

version_value : 11.3-STABLE before r357214 (string)

}

4 : { »

version_value : 11.3-RELEASE before 11.3-RELEASE-p6 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Heap-based buffer overflow (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

refsource : MISC (string)

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T09:25:49.035Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 63664ac6-956c-4cba-a5d0-f46076e16109 (string)

assignerShortName : freebsd (string)

cveId : CVE-2020-7450 (string)

datePublished : 2020-02-18T15:26:42 (string)

dateReserved : 2020-01-21T00:00:00 (string)

dateUpdated : 2024-08-04T09:25:49.035Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*", "matchCriteriaId": "F35957CE-AF9F-40CA-BDD1-FA6A0E73783F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*", "matchCriteriaId": "EA929713-B797-494A-853D-C121D9D69519", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*", "matchCriteriaId": "3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*", "matchCriteriaId": "EA5006FF-06A5-4D95-BF5B-29F26248D11F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*", "matchCriteriaId": "A705031B-FD63-4076-B92E-E826E11D7111", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*", "matchCriteriaId": "11C1EFB1-68E5-45F4-A7E1-744574F290D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:*", "matchCriteriaId": "826B53C2-517F-4FC6-92E8-E7FCB24F91B4", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:*", "matchCriteriaId": "93F10A46-AEF2-4FDD-92D6-0CF07B70F986", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p10:*:*:*:*:*:*", "matchCriteriaId": "8C7B8FCA-2170-469A-B6D6-2C6AB254F20F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p11:*:*:*:*:*:*", "matchCriteriaId": "E94067A1-5C68-4401-A7B6-29B4FE553733", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p12:*:*:*:*:*:*", "matchCriteriaId": "87EE567B-7604-41CC-B0A7-B51255D4C240", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:*", "matchCriteriaId": "E1AD57A9-F53A-4E40-966E-F2F50852C5E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:*", "matchCriteriaId": "C4029113-130F-4A33-A8A0-BC3E74000378", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:*", "matchCriteriaId": "46C5A6FD-7BBF-4E84-9895-8EE14DC846E4", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:*", "matchCriteriaId": "882669AB-BCFC-4517-A3E9-33D344F1ED0D", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:*", "matchCriteriaId": "BC3D24FB-50A2-4E37-A479-AF21F8ECD706", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:*", "matchCriteriaId": "3070787D-76E1-4671-B99D-213F7103B3A2", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.0:p9:*:*:*:*:*:*", "matchCriteriaId": "0140276F-9C31-4B5C-A5AC-DE0EBB885275", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*", "matchCriteriaId": "BD730B6A-F123-4685-ACB3-4F20AAAB77F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*", "matchCriteriaId": "508150E3-2C0C-4EEB-BFC9-BB5CEB404C06", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution."}, {"lang": "es", "value": "En FreeBSD versiones 12.1-STABLE anteriores a r357213, versiones 12.1-RELEASE versiones anteriores a 12.1-RELEASE-p2, versiones 12.0-RELEASE anteriores a 12.0-RELEASE-p13, versiones 11.3-STABLE anteriores a r357214 y versiones 11.3-RELEASE anteriores a 11.3-RELEASE-p6, el manejo de URL en libfetch con URLs que contienen componentes de nombre de usuario y/o contrase\u00f1a es vulnerable a un desbordamiento del b\u00fafer, que permite un comportamiento inapropiado del programa o una ejecuci\u00f3n de c\u00f3digo malicioso."}], "id": "CVE-2020-7450", "lastModified": "2024-11-21T05:37:10.160", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-02-18T16:15:11.610", "references": [{"source": "secteam@freebsd.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:* (string)

matchCriteriaId : F35957CE-AF9F-40CA-BDD1-FA6A0E73783F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:* (string)

matchCriteriaId : EA929713-B797-494A-853D-C121D9D69519 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:* (string)

matchCriteriaId : 3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:* (string)

matchCriteriaId : EA5006FF-06A5-4D95-BF5B-29F26248D11F (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:* (string)

matchCriteriaId : A705031B-FD63-4076-B92E-E826E11D7111 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:* (string)

matchCriteriaId : 11C1EFB1-68E5-45F4-A7E1-744574F290D1 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:-:*:*:*:*:*:* (string)

matchCriteriaId : 826B53C2-517F-4FC6-92E8-E7FCB24F91B4 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p1:*:*:*:*:*:* (string)

matchCriteriaId : 93F10A46-AEF2-4FDD-92D6-0CF07B70F986 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p10:*:*:*:*:*:* (string)

matchCriteriaId : 8C7B8FCA-2170-469A-B6D6-2C6AB254F20F (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p11:*:*:*:*:*:* (string)

matchCriteriaId : E94067A1-5C68-4401-A7B6-29B4FE553733 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p12:*:*:*:*:*:* (string)

matchCriteriaId : 87EE567B-7604-41CC-B0A7-B51255D4C240 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p2:*:*:*:*:*:* (string)

matchCriteriaId : E1AD57A9-F53A-4E40-966E-F2F50852C5E4 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p3:*:*:*:*:*:* (string)

matchCriteriaId : C4029113-130F-4A33-A8A0-BC3E74000378 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p4:*:*:*:*:*:* (string)

matchCriteriaId : 46C5A6FD-7BBF-4E84-9895-8EE14DC846E4 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p6:*:*:*:*:*:* (string)

matchCriteriaId : 882669AB-BCFC-4517-A3E9-33D344F1ED0D (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p7:*:*:*:*:*:* (string)

matchCriteriaId : BC3D24FB-50A2-4E37-A479-AF21F8ECD706 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p8:*:*:*:*:*:* (string)

matchCriteriaId : 3070787D-76E1-4671-B99D-213F7103B3A2 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.0:p9:*:*:*:*:*:* (string)

matchCriteriaId : 0140276F-9C31-4B5C-A5AC-DE0EBB885275 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:* (string)

matchCriteriaId : BD730B6A-F123-4685-ACB3-4F20AAAB77F3 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:* (string)

matchCriteriaId : 508150E3-2C0C-4EEB-BFC9-BB5CEB404C06 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in libfetch with URLs containing username and/or password components is vulnerable to a heap buffer overflow allowing program misbehavior or malicious code execution. (string)

}

1 : { »

lang : es (string)

value : En FreeBSD versiones 12.1-STABLE anteriores a r357213, versiones 12.1-RELEASE versiones anteriores a 12.1-RELEASE-p2, versiones 12.0-RELEASE anteriores a 12.0-RELEASE-p13, versiones 11.3-STABLE anteriores a r357214 y versiones 11.3-RELEASE anteriores a 11.3-RELEASE-p6, el manejo de URL en libfetch con URLs que contienen componentes de nombre de usuario y/o contraseña es vulnerable a un desbordamiento del búfer, que permite un comportamiento inapropiado del programa o una ejecución de código malicioso. (string)

}

]

id : CVE-2020-7450 (string)

lastModified : 2024-11-21T05:37:10.160 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2020-02-18T16:15:11.610 (string)

references : [ »

0 : { »

source : secteam@freebsd.org (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://security.FreeBSD.org/advisories/FreeBSD-SA-20:01.libfetch.asc (string)

}

]

sourceIdentifier : secteam@freebsd.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object