CVE-2020-25584

    Dashboard / Vulnerabilities / CVE-2020-25584

    CVE-2020-25584

    Published: 7 Apr 2021Last Modified: 24 Feb 2026

    Summary:

    Details: In FreeBSD 13.0-STABLE before n245118, 12.2-STABLE before r369552, 11.4-STABLE before r369560, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, a superuser inside a FreeBSD jail configured with the non-default allow.mount permission could cause a race condition between the lookup of ".." and remounting a filesystem, allowing access to filesystem hierarchy outside of the jail.

    References: https://security.FreeBSD.org/advisories/FreeBSD-SA-21:10.jail_mount.asc, https://security.netapp.com/advisory/ntap-20210423-0009/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -a344d02bf3aef5d00d8b41eb9c8a0cb1ca4a1a9c

    Affected versions

    vendor/FreeBSD/dist/10.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-25584 | CVE-DB