CVE-2020-7463

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper…

published March 26, 2021

CVSS
—
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper handling in the kernel causes a use-after-free bug by sending large user messages from multiple threads on the same SCTP socket. The use-after-free situation may result in unintended kernel behaviour including a kernel panic.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Published
2021-03-26T20:48Z
EPSS history
Timeline
  • 26 MAR 20:48Z
    In FreeBSD 12.1-STABLE before r364644, 11.4-STABLE before r364651, 12.1-RELEASE before p9, 11.4-RELEASE before p3, and 11.3-RELEASE before p13, improper…
    cvelistv5