vulnerability
FreeBSD: VID-77B877AA-EC18-11EA-88F8-901B0EF719AB (CVE-2020-7463): FreeBSD -- SCTP socket use-after-free bug
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:L/AC:L/Au:N/C:N/I:N/A:C) | Sep 2, 2020 | Sep 3, 2020 | Apr 5, 2021 |
Severity
5
CVSS
(AV:L/AC:L/Au:N/C:N/I:N/A:C)
Published
Sep 2, 2020
Added
Sep 3, 2020
Modified
Apr 5, 2021
Description
Details for this vulnerability have not been published by NIST at this point. Descriptions from software vendor advisories for this issue are provided below.
From VID-77B877AA-EC18-11EA-88F8-901B0EF719AB:
Problem Description:
Due to improper handling in the kernel, a use-after-free bug can be triggered
by sending large user messages from multiple threads on the same socket.
Impact:
Triggering the use-after-free situation may result in unintended kernel
behaviour including a kernel panic.
Solutions
freebsd-upgrade-base-11_3-release-p13freebsd-upgrade-base-11_4-release-p3freebsd-upgrade-base-12_1-release-p9
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.