CVE-2020-7463

CVE	CVE-2020-7463
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-03-26 21:15:00 UTC
Updated	2023-01-09 16:41:00 UTC
Description	In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

Problem Types: CWE-416

Type	Vendor	Product	Version	Update	Edition	Language
Application	Apple	Icloud	All	All	All	All
Operating System	Apple	Ipados	All	All	All	All
Operating System	Apple	Ipad Os	All	All	All	All
Operating System	Apple	Iphone Os	All	All	All	All
Application	Apple	Itunes	All	All	All	All
Operating System	Apple	Macos	All	All	All	All
Application	Apple	Safari	All	All	All	All
Operating System	Apple	Tvos	All	All	All	All
Operating System	Apple	Watchos	All	All	All	All
Operating System	Freebsd	Freebsd	11.3	-	All	All
Operating System	Freebsd	Freebsd	11.3	p1	All	All
Operating System	Freebsd	Freebsd	11.3	p10	All	All
Operating System	Freebsd	Freebsd	11.3	p11	All	All
Operating System	Freebsd	Freebsd	11.3	p12	All	All
Operating System	Freebsd	Freebsd	11.3	p2	All	All
Operating System	Freebsd	Freebsd	11.3	p3	All	All
Operating System	Freebsd	Freebsd	11.3	p4	All	All
Operating System	Freebsd	Freebsd	11.3	p5	All	All
Operating System	Freebsd	Freebsd	11.3	p6	All	All
Operating System	Freebsd	Freebsd	11.3	p7	All	All
Operating System	Freebsd	Freebsd	11.3	p8	All	All
Operating System	Freebsd	Freebsd	11.3	p9	All	All
Operating System	Freebsd	Freebsd	11.4	-	All	All
Operating System	Freebsd	Freebsd	11.4	p1	All	All
Operating System	Freebsd	Freebsd	11.4	p2	All	All
Operating System	Freebsd	Freebsd	12.1	-	All	All
Operating System	Freebsd	Freebsd	12.1	p1	All	All
Operating System	Freebsd	Freebsd	12.1	p2	All	All
Operating System	Freebsd	Freebsd	12.1	p3	All	All
Operating System	Freebsd	Freebsd	12.1	p4	All	All
Operating System	Freebsd	Freebsd	12.1	p5	All	All
Operating System	Freebsd	Freebsd	12.1	p6	All	All
Operating System	Freebsd	Freebsd	12.1	p7	All	All
Operating System	Freebsd	Freebsd	12.1	p8	All	All
Operating System	Freebsd	Freebsd	12.2	-	All	All

Reference	Source	Link	Tags
About the security content of iTunes 12.11.3 for Windows - Apple Support	CONFIRM	support.apple.com
About the security content of iOS 14.5 and iPadOS 14.5 - Apple Support	CONFIRM	support.apple.com
About the security content of Safari 14.1 - Apple Support	CONFIRM	support.apple.com
Full Disclosure: APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5	FULLDISC	seclists.org
Full Disclosure: APPLE-SA-2021-04-26-7 Safari 14.1	FULLDISC	seclists.org
Full Disclosure: APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows	FULLDISC	seclists.org
About the security content of iCloud for Windows 12.3 - Apple Support	CONFIRM	support.apple.com
Full Disclosure: APPLE-SA-2021-04-26-8 iCloud for Windows 12.3	FULLDISC	seclists.org
security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc	MISC	security.FreeBSD.org
About the security content of macOS Big Sur 11.3 - Apple Support	CONFIRM	support.apple.com
About the security content of tvOS 14.5 - Apple Support	CONFIRM	support.apple.com
Sobre o conteúdo de segurança do watchOS 7.4 - Suporte da Apple	CONFIRM	support.apple.com
Full Disclosure: APPLE-SA-2021-04-26-2 macOS Big Sur 11.3	FULLDISC	seclists.org
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

375503 Apple MacOS Big Sur 11.3 Not Installed (HT212325)
375506 Apple iCloud for Windows Prior to 12.3 Multiple Vulnerabilities(HT212321)
375508 Apple iTunes for Windows Prior to 12.11.3 Multiple Vulnerabilities (HT212319)
375509 Apple Safari Multiple Vulnerabilities (HT212318)
376650 Apple iTunes for Windows Prior to 12.11.3 Vulnerabilities (HT212319)
376806 NetApp Clustered Data Open Network Technology for Appliance Products (ONTAP) Sensitive Information Disclosure Vulnerability (NTAP-20201016-0002)
610334 Apple iOS 14.5 and iPadOS 14.5 Security Update Missing (HT212317)
690488 Free Berkeley Software Distribution (FreeBSD) Security Update for Free Berkeley Software Distribution (FreeBSD) (77b877aa-ec18-11ea-88f8-901b0ef719ab)