NetSight
IP …
medium5.5

CVE-2020-7463

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handli…

Impact

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Affected products

VendorProductAffected versions
FreebsdFreebsd
Versions 11.3, 11.4, 12.1, 12.2
AppleIcloud
before 12.3
AppleItunes
before 12.11.3
AppleSafari
before 14.1
AppleIpados
before 14.5
AppleIphone Os
before 14.5
AppleMacos
from 11.0 before 11.3
AppleTvos
before 14.5
AppleWatchos
before 7.4

Weakness classification

CWE-416

References