Vulnerability · Published Mar 26, 2021 · Assigned by freebsd

CVE-2020-7463

Medium 5.5

In plain English

A medium-severity security flaw in FreeBSD. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.4%top 65.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Affected products (as reported)

Vendor	Product	Versions
n/a	FreeBSD	FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc x_refsource_MISC
https://support.apple.com/kb/HT212317 x_refsource_CONFIRM
https://support.apple.com/kb/HT212319 x_refsource_CONFIRM
https://support.apple.com/kb/HT212325 x_refsource_CONFIRM
https://support.apple.com/kb/HT212323 x_refsource_CONFIRM
https://support.apple.com/kb/HT212324 x_refsource_CONFIRM
https://support.apple.com/kb/HT212321 x_refsource_CONFIRM
https://support.apple.com/kb/HT212318 x_refsource_CONFIRM
20210427 APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5 mailing-list, x_refsource_FULLDISC
20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 mailing-list, x_refsource_FULLDISC
20210427 APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows mailing-list, x_refsource_FULLDISC
20210427 APPLE-SA-2021-04-26-8 iCloud for Windows 12.3 mailing-list, x_refsource_FULLDISC
20210427 APPLE-SA-2021-04-26-7 Safari 14.1 mailing-list, x_refsource_FULLDISC