CVE-2020-25583

    Dashboard / Vulnerabilities / CVE-2020-25583

    CVE-2020-25583

    Published: 29 Mar 2021Last Modified: 24 Feb 2026

    Summary:

    Details: In FreeBSD 12.2-STABLE before r368250, 11.4-STABLE before r368253, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 when processing a DNSSL option, rtsold(8) decodes domain name labels per an encoding specified in RFC 1035 in which the first octet of each label contains the label's length. rtsold(8) did not validate label lengths correctly and could overflow the destination buffer.

    References: https://security.FreeBSD.org/advisories/FreeBSD-SA-20:32.rtsold.asc, https://security.netapp.com/advisory/ntap-20210423-0004/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a344d02bf3aef5d00d8b41eb9c8a0cb1ca4a1a9c

    Affected versions

    vendor/FreeBSD/dist/10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-25583 | CVE-DB