CVE-2020-7463
Severity Score
5.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.
En FreeBSD versiones 12.1-STABLE anteriores a r364644, 11.4-STABLE anteriores a r364651, 12.1-RELEASE anteriores a p9, 11.4-RELEASE anteriores a p3 y 11.3-RELEASE anteriores a p13, el manejo inapropiado en el kernel causa un bug de uso de la memoria previamente liberada mediante el envío de mensajes de usuario grandes de múltiples subprocesos en el mismo socket SCTP. La situación del uso de la memoria previamente liberada puede resultar en un comportamiento del kernel no deseado, incluyendo un pánico del kernel.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-01-21 CVE Reserved
- 2021-03-26 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2021/Apr/49 | Mailing List |
|
| http://seclists.org/fulldisclosure/2021/Apr/50 | Mailing List |
|
| http://seclists.org/fulldisclosure/2021/Apr/57 | Mailing List |
|
| http://seclists.org/fulldisclosure/2021/Apr/58 | Mailing List |
|
| http://seclists.org/fulldisclosure/2021/Apr/59 | Mailing List |
|
| https://support.apple.com/kb/HT212317 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212318 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212319 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212321 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212323 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212324 | Third Party Advisory |
|
| https://support.apple.com/kb/HT212325 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc | 2023-01-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | - |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p1 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p10 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p11 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p12 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p2 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p3 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p4 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p5 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p6 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p7 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p8 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.3 Search vendor "Freebsd" for product "Freebsd" and version "11.3" | p9 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.4 Search vendor "Freebsd" for product "Freebsd" and version "11.4" | - |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.4 Search vendor "Freebsd" for product "Freebsd" and version "11.4" | p1 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 11.4 Search vendor "Freebsd" for product "Freebsd" and version "11.4" | p2 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | - |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p1 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p2 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p3 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p4 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p5 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p6 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p7 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.1 Search vendor "Freebsd" for product "Freebsd" and version "12.1" | p8 |
Affected
| ||||||
| Freebsd Search vendor "Freebsd" | Freebsd Search vendor "Freebsd" for product "Freebsd" | 12.2 Search vendor "Freebsd" for product "Freebsd" and version "12.2" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Icloud Search vendor "Apple" for product "Icloud" | < 12.3 Search vendor "Apple" for product "Icloud" and version " < 12.3" | windows |
Affected
| ||||||
| Apple Search vendor "Apple" | Itunes Search vendor "Apple" for product "Itunes" | < 12.11.3 Search vendor "Apple" for product "Itunes" and version " < 12.11.3" | windows |
Affected
| ||||||
| Apple Search vendor "Apple" | Safari Search vendor "Apple" for product "Safari" | < 14.1 Search vendor "Apple" for product "Safari" and version " < 14.1" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Ipados Search vendor "Apple" for product "Ipados" | < 14.5 Search vendor "Apple" for product "Ipados" and version " < 14.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 14.5 Search vendor "Apple" for product "Iphone Os" and version " < 14.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | >= 11.0 < 11.3 Search vendor "Apple" for product "Macos" and version " >= 11.0 < 11.3" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Tvos Search vendor "Apple" for product "Tvos" | < 14.5 Search vendor "Apple" for product "Tvos" and version " < 14.5" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Watchos Search vendor "Apple" for product "Watchos" | < 7.4 Search vendor "Apple" for product "Watchos" and version " < 7.4" | - |
Affected
| ||||||