CVE-2020-7461: Freebsd

High severity, CVSS 7.3. EPSS: 4.1% chance of exploitation in the next 30 days.

In FreeBSD 12.1-STABLE before r365010, 11.4-STABLE before r365011, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, dhclient(8) fails to handle certain malformed input related to handling of DHCP option 119 resulting a heap overflow. The heap overflow could in principle be exploited to achieve remote code execution. The affected process runs with reduced privileges in a Capsicum sandbox, limiting the immediate impact of an exploit.

Affected products

• Freebsd Freebsd: version 11.3 only; version 11.4 only; version 12.1 only
• Siemens SIMATIC RF350M Firmware: any version
• Siemens SIMATIC RF650M Firmware: any version

Published 2021-03-26. Last modified 2026-06-17.