CVE-2021-29627

In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free or use after free.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.75% chance of exploitation in the next 30 days, 52th percentile

Published

2021-04-07

Updated

2024-08-03

Proof-of-concept exploits (1)

• raymontag/cve-2021-2962712★ · 2021-04-12

References

• CVE Record
• NVD entry

Related

• CVE-2019-2215
• CVE-2019-5596
• CVE-2019-5603
• CVE-2021-1782
• CVE-2021-29625
• CVE-2021-29641