{"containers": {"cna": {"affected": [{"product": "FreeBSD", "vendor": "n/a", "versions": [{"status": "affected", "version": "FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic."}], "problemTypes": [{"descriptions": [{"description": "Use After Free", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-07-22T10:06:18", "orgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "shortName": "freebsd"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212317"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212319"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212325"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212323"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212324"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212321"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/kb/HT212318"}, {"name": "20210427 APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/49"}, {"name": "20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/50"}, {"name": "20210427 APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/59"}, {"name": "20210427 APPLE-SA-2021-04-26-8 iCloud for Windows 12.3", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/58"}, {"name": "20210427 APPLE-SA-2021-04-26-7 Safari 14.1", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/57"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secteam@freebsd.org", "ID": "CVE-2020-7463", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "FreeBSD", "version": {"version_data": [{"version_value": "FreeBSD 12.1-RELEASE before p9, 11.4-RELEASE before p3, 11.3-RELEASE before p13"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Use After Free"}]}]}, "references": {"reference_data": [{"name": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc", "refsource": "MISC", "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc"}, {"name": "https://support.apple.com/kb/HT212317", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212317"}, {"name": "https://support.apple.com/kb/HT212319", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212319"}, {"name": "https://support.apple.com/kb/HT212325", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212325"}, {"name": "https://support.apple.com/kb/HT212323", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212323"}, {"name": "https://support.apple.com/kb/HT212324", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212324"}, {"name": "https://support.apple.com/kb/HT212321", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212321"}, {"name": "https://support.apple.com/kb/HT212318", "refsource": "CONFIRM", "url": "https://support.apple.com/kb/HT212318"}, {"name": "20210427 APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/49"}, {"name": "20210427 APPLE-SA-2021-04-26-2 macOS Big Sur 11.3", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/50"}, {"name": "20210427 APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/59"}, {"name": "20210427 APPLE-SA-2021-04-26-8 iCloud for Windows 12.3", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/58"}, {"name": "20210427 APPLE-SA-2021-04-26-7 Safari 14.1", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/57"}]}}}}, "cveMetadata": {"assignerOrgId": "63664ac6-956c-4cba-a5d0-f46076e16109", "assignerShortName": "freebsd", "cveId": "CVE-2020-7463", "datePublished": "2021-03-26T20:48:18", "dateReserved": "2020-01-21T00:00:00", "dateUpdated": "2021-07-22T10:06:18", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*", "matchCriteriaId": "F35957CE-AF9F-40CA-BDD1-FA6A0E73783F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*", "matchCriteriaId": "EA929713-B797-494A-853D-C121D9D69519", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*", "matchCriteriaId": "B87AF171-95AC-4DDA-8D94-694F85638B46", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*", "matchCriteriaId": "1CC8B031-41BB-4846-B092-7E4BC6F35D6B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*", "matchCriteriaId": "83E34012-BC9D-4F0C-AAE1-FE5767B4EED6", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*", "matchCriteriaId": "3C3D8EDC-91D3-45B2-AC1D-EF4346D4A714", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*", "matchCriteriaId": "EA5006FF-06A5-4D95-BF5B-29F26248D11F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*", "matchCriteriaId": "A705031B-FD63-4076-B92E-E826E11D7111", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*", "matchCriteriaId": "11C1EFB1-68E5-45F4-A7E1-744574F290D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*", "matchCriteriaId": "25F649A7-9265-4552-8934-BCE083363982", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*", "matchCriteriaId": "F202C856-5B95-4796-AC4A-1F210E7BAB8F", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*", "matchCriteriaId": "9419C866-C478-4CDE-A9A1-E592D8FF0933", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*", "matchCriteriaId": "2B6DFC23-A7A1-431A-9AD9-A820579F95F0", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*", "matchCriteriaId": "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*", "matchCriteriaId": "9FCA6A72-2A72-45FD-A43D-B5BF7C329121", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*", "matchCriteriaId": "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*", "matchCriteriaId": "BD730B6A-F123-4685-ACB3-4F20AAAB77F3", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*", "matchCriteriaId": "508150E3-2C0C-4EEB-BFC9-BB5CEB404C06", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*", "matchCriteriaId": "B5D692EF-A5D7-430E-91BA-4CD137343B66", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*", "matchCriteriaId": "D50C60A7-4C9F-4636-92E9-9F5B8B01BE5B", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*", "matchCriteriaId": "6C49F6C7-A740-42F4-93BB-512CBF334516", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*", "matchCriteriaId": "402740C4-5B55-423F-BAD2-F742E1E21ADC", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*", "matchCriteriaId": "9DCAA10A-C612-45E0-84B7-55897F49D65E", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*", "matchCriteriaId": "CB6258A5-8066-48B8-A417-09A1547DD57A", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*", "matchCriteriaId": "6601C7C4-EC36-4EAA-90AC-D3156A2BF330", "vulnerable": true}, {"criteria": "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*", "matchCriteriaId": "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*", "matchCriteriaId": "338FA0C8-C5BA-4D8D-A196-EB728FCA228C", "versionEndExcluding": "12.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*", "matchCriteriaId": "24BA91CC-8D32-48F0-BB77-FF3ACA45176A", "versionEndExcluding": "12.11.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "matchCriteriaId": "42EAB49D-2EA1-4B1F-BDAC-3165D1CB3759", "versionEndExcluding": "14.1", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "matchCriteriaId": "3EAAE2C1-EF21-4567-99F1-335D1EF955D1", "versionEndExcluding": "14.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "matchCriteriaId": "C1E12568-6F17-458F-8216-3D6DBC8F6DEE", "versionEndExcluding": "14.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E699CCC-31F5-458E-A59C-79B3AF143747", "versionEndExcluding": "11.3", "versionStartIncluding": "11.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5B77841-F161-47AB-8043-3E0346E3AA25", "versionEndExcluding": "14.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*", "matchCriteriaId": "CFFFE00C-0AA6-4F60-ABF4-E68877BFD8F8", "versionEndExcluding": "7.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic."}, {"lang": "es", "value": "En FreeBSD versiones 12.1-STABLE anteriores a r364644, 11.4-STABLE anteriores a r364651, 12.1-RELEASE anteriores a p9, 11.4-RELEASE anteriores a p3 y 11.3-RELEASE anteriores a p13, el manejo inapropiado en el kernel causa un bug de uso de la memoria previamente liberada mediante el env\u00edo de mensajes de usuario grandes de m\u00faltiples subprocesos en el mismo socket SCTP. La situaci\u00f3n del uso de la memoria previamente liberada puede resultar en un comportamiento del kernel no deseado, incluyendo un p\u00e1nico del kernel."}], "id": "CVE-2020-7463", "lastModified": "2023-01-09T16:41:59.350", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-03-26T21:15:13.193", "references": [{"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/49"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/50"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/57"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/58"}, {"source": "secteam@freebsd.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/59"}, {"source": "secteam@freebsd.org", "tags": ["Vendor Advisory"], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212317"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212318"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212319"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212321"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212323"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212324"}, {"source": "secteam@freebsd.org", "tags": ["Third Party Advisory"], "url": "https://support.apple.com/kb/HT212325"}], "sourceIdentifier": "secteam@freebsd.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}