Vulnerability Description
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freebsd | Freebsd | 11.3 |
| Apple | Icloud | < 12.3 |
| Apple | Itunes | < 12.11.3 |
| Apple | Safari | < 14.1 |
| Apple | Ipados | < 14.5 |
| Apple | Iphone Os | < 14.5 |
| Apple | Macos | >= 11.0, < 11.3 |
| Apple | Tvos | < 14.5 |
| Apple | Watchos | < 7.4 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2021/Apr/49Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/50Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/57Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/58Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/59Mailing ListThird Party Advisory
- https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.ascVendor Advisory
- https://support.apple.com/kb/HT212317Third Party Advisory
- https://support.apple.com/kb/HT212318Third Party Advisory
- https://support.apple.com/kb/HT212319Third Party Advisory
- https://support.apple.com/kb/HT212321Third Party Advisory
- https://support.apple.com/kb/HT212323Third Party Advisory
- https://support.apple.com/kb/HT212324Third Party Advisory
- https://support.apple.com/kb/HT212325Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/49Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2021/Apr/50Mailing ListThird Party Advisory
FAQ
What is CVE-2020-7463?
CVE-2020-7463 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free ...
How severe is CVE-2020-7463?
CVE-2020-7463 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7463?
Check the references section above for vendor advisories and patch information. Affected products include: Freebsd Freebsd, Apple Icloud, Apple Itunes, Apple Safari, Apple Ipados.