CVE-2020-9967

Sažetak

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

Reference

https://support.apple.com/en-us/HT212011
https://support.apple.com/en-us/HT211844
https://support.apple.com/en-us/HT211843
https://support.apple.com/en-us/HT211931
https://support.apple.com/en-us/HT211850
http://packetstormsecurity.com/files/163501/XNU-Network-Stack-Kernel-Heap-Overflow.html

CVSS

Base:	9.3
Impact:	10.0
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:M/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

28-06-2022 - 14:11

Objavljeno

02-04-2021 - 18:15