Vulnerabilities in FreeBSD

In FreeBSD seven vulnerabilities have been identified several vulnerabilities have been addressed in updates 12.1-RELEASE-p8, 11.4-RELEASE-p2, and 11.3-RELEASE-p12:

• CVE-2020-7460 — privilege escalation in the system through
  manipulations with the 32-bit sendmsg call on a 64-bit system. 32-bit systems and systems with a kernel compiled without the COMPAT_FREEBSD32 option (enabled by default in GENERIC kernels) are not affected by this issue.
• CVE-2020-7459 — the lack of proper size checks for data copied to the buffer in Ethernet drivers smsc (SMSC/Microchip), muge (Microchip), and cdceem (USB Communication Device Class) allows an attacker to execute code at the kernel level or in user space by connecting a malicious USB device to the system. Exploiting this vulnerability requires physical access to the hardware and the ability to activate the network interface.
• Series of vulnerabilities in SQLite, addressed in releases SQLite 3.32.1 and 3.32.2, which could lead to crashes or data corruption:
  CVE-2020-11655,
  CVE-2020-11656,
  CVE-2020-13434,
  CVE-2020-13435,
  CVE-2020-13630,
  CVE-2020-13631,
  CVE-2020-13632.

Source: opennet.ru