Medium severity5.5NVD Advisory· Published Mar 26, 2021· Updated Jun 17, 2026
CVE-2020-7463
CVE-2020-7463
Description
In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
36cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*+ 26 more
- cpe:2.3:o:freebsd:freebsd:11.3:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p10:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p11:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p12:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.3:p9:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:-:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p1:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p2:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p3:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p4:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p5:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p6:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p7:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.1:p8:*:*:*:*:*:*
- cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*
- (no CPE)range: <12.1-RELEASE p9, <11.4-RELEASE p3, <11.3-RELEASE p13, <12.1-STABLE r364644, <11.4-STABLE r364651
- FreeBSD/FreeBSDdescription
Patches
Vulnerability mechanics
References
13- seclists.org/fulldisclosure/2021/Apr/49nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Apr/50nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Apr/57nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Apr/58nvdMailing ListThird Party Advisory
- seclists.org/fulldisclosure/2021/Apr/59nvdMailing ListThird Party Advisory
- security.freebsd.org/advisories/FreeBSD-SA-20:25.sctp.ascnvdVendor Advisory
- support.apple.com/kb/HT212317nvdThird Party Advisory
- support.apple.com/kb/HT212318nvdThird Party Advisory
- support.apple.com/kb/HT212319nvdThird Party Advisory
- support.apple.com/kb/HT212321nvdThird Party Advisory
- support.apple.com/kb/HT212323nvdThird Party Advisory
- support.apple.com/kb/HT212324nvdThird Party Advisory
- support.apple.com/kb/HT212325nvdThird Party Advisory
News mentions
0No linked articles in our index yet.