{"id":"CVE-2020-7463","aliases":["EUVD-2020-28589","GHSA-j8c4-54pw-h2vw"],"status":"published","title":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4...","description":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00399,"percentile":0.34417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-416"],"published":"2021-03-26T20:48:18Z","modified":"2026-06-17T03:24:49Z","products":[{"vendor":"apple","product":"icloud"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"itunes"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"freebsd","product":"freebsd"}],"references":[{"url":"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:25.sctp.asc","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT212317","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212319","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212325","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212323","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212324","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212321","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://support.apple.com/kb/HT212318","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/49","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/50","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/59","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/58","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Apr/57","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7463"},{"url":"https://github.com/advisories/GHSA-j8c4-54pw-h2vw"}],"sources":{"cve":[{"id":"CVE-2020-7463","description":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.","status":"published","published":"2021-03-26T20:48:18Z","modified":"2024-08-04T09:33:18.739Z","updated_at":"2026-11-02T14:35:58.787905Z"}],"euvd":[{"id":"EUVD-2020-28589","description":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.","status":"published","published":"2021-03-26T20:48:18Z","modified":"2024-08-04T09:33:18Z","updated_at":"2026-11-03T03:08:00.054795Z"}],"ghsa":[{"id":"GHSA-j8c4-54pw-h2vw","title":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4...","description":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.","status":"published","published":"2022-05-24T17:45:31Z","modified":"2023-01-29T05:06:09Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:45:57.703827Z"}],"nvd":[{"id":"CVE-2020-7463","description":"In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.","status":"published","published":"2021-03-26T21:15:13.193Z","modified":"2026-06-17T03:24:49.76Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:06:37.687844Z"}]}}