CVE-2020-24863

A memory corruption vulnerability was found in the kernel function kern_getfsstat in MidnightBSD before 1.2.7 and 1.3 through 2020-08-19, and FreeBSD through 11.4, that allows an attacker to trigger an invalid free and crash the system via a crafted size value in conjunction with an invalid mode.

• CWE-787

• http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:01.txtExploit, Vendor Advisory
• https://github.com/MidnightBSD/src/blob/1691c07ff4f27b97220a5d65e217341e477f4014/sys/kern/vfs_syscalls.cExploit, Third Party Advisory
• https://www.freebsd.org/security/advisories/FreeBSD-EN-20:18.getfsstat.ascPatch, Vendor Advisory
• https://www.midnightbsd.org/notes/Release Notes, Vendor Advisory
• http://www.midnightbsd.org/security/adv/MIDNIGHTBSD-SA-20:01.txtExploit, Vendor Advisory
• https://github.com/MidnightBSD/src/blob/1691c07ff4f27b97220a5d65e217341e477f4014/sys/kern/vfs_syscalls.cExploit, Third Party Advisory
• https://www.freebsd.org/security/advisories/FreeBSD-EN-20:18.getfsstat.ascPatch, Vendor Advisory
• https://www.midnightbsd.org/notes/Release Notes, Vendor Advisory

Published

Sep 3, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24849A remote code execution vulnerability is identified in Fruit…8.8
• CVE-2020-24855Directory Traversal vulnerability in easywebpack-cli before …5.3
• CVE-2020-24857Cross Site Scripting vulnerabilty found in IXPManager v.5.6.…6.1
• CVE-2020-24860CMS Made Simple 2.2.14 allows an authenticated user with acc…5.4
• CVE-2020-24861GetSimple CMS 3.3.16 allows in parameter 'permalink' on the …5.4
• CVE-2020-24862The catID parameter in Pharmacy Medical Store and Sale Point…7.5
• CVE-2020-24870Libraw before 0.20.1 has a stack buffer overflow via LibRaw:…8.8
• CVE-2020-24872Cross Site Scripting (XSS) vulnerability in backend/pages/mo…6.1
• CVE-2020-24876Use of a hard-coded cryptographic key in Pancake versions < …9.8
• CVE-2020-24877A SQL injection vulnerability in zzzphp v1.8.0 through /form…9.8
• CVE-2020-24881SSRF exists in osTicket before 1.14.3, where an attacker can…9.8
• CVE-2020-24889A buffer overflow vulnerability in LibRaw version < 20.0 Lib…7.8