{"id":"CVE-2020-7469","url":"https://www.cyber-defence.io/tools/cve/CVE-2020-7469","generatedAt":"2026-10-27T23:43:14.279Z","title":"The network stack may later dereference the pointer, potentially triggering a use-after-free.","description":"In FreeBSD 12.2-STABLE before r367402, 11.4-STABLE before r368202, 12.2-RELEASE before p1, 12.1-RELEASE before p11 and 11.4-RELEASE before p5 the handler for a routing option caches a pointer into the packet buffer holding the ICMPv6 message. However, when processing subsequent options the packet buffer may be freed, rendering the cached pointer invalid. The network stack may later dereference the pointer, potentially triggering a use-after-free.","published":"2021-06-04T12:15:07.000Z","lastModified":"2026-06-17T03:24:51.000Z","status":"Modified","sourceIdentifier":"secteam@freebsd.org","cvss":{"version":"3.1","score":7.5,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":["CWE-416"],"affected":["freebsd/freebsd","netapp/clustered data ontap"],"epss":{"score":0.01221,"percentile":0.68506,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.22%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.asc","tags":["Vendor Advisory"],"source":"secteam@freebsd.org"},{"url":"https://security.netapp.com/advisory/ntap-20210720-0001/","tags":["Third Party Advisory"],"source":"secteam@freebsd.org"},{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:31.icmp6.asc","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210720-0001/","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-7469","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}