CVE-2020-7469

In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.

• CWE-416

• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.ascVendor Advisory
• https://security.netapp.com/advisory/ntap-20210720-0001/Third Party Advisory
• https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.ascVendor Advisory
• https://security.netapp.com/advisory/ntap-20210720-0001/Third Party Advisory

Published

Jun 4, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-7463In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r3…5.5
• CVE-2020-7464In FreeBSD 12.2-STABLE before r365730, 11.4-STABLE before r3…5.3
• CVE-2020-7465The L2TP implementation of MPD before 5.9 allows a remote at…9.8
• CVE-2020-7466The PPP implementation of MPD before 5.9 allows a remote att…7.5
• CVE-2020-7467In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r3…7.6
• CVE-2020-7468In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r3…8.8
• CVE-2020-7470Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XS…4.8
• CVE-2020-7471Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 befor…9.8
• CVE-2020-7472An authorization bypass and PHP local-file-include vulnerabi…9.8
• CVE-2020-7473In certain situations, all versions of Citrix ShareFile Stor…7.5
• CVE-2020-7474A CWE-427: Uncontrolled Search Path Element vulnerability ex…7.8
• CVE-2020-7475A CWE-74: Improper Neutralization of Special Elements in Out…9.8