VULNERABILITY INTELLIGENCE

CVE-2020-25579

CVSS score5.3 MEDIUM
EPSS probability1.12%
CISA KEVNot currently listed
Published2021-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 msdosfs(5) was failing to zero-fill a pair of padding fields in the dirent structure, resulting in a leak of three uninitialized bytes.

Weakness classification

  • nvd@nist.gov: CWE-909

Primary references