CVE-2013-0964

Опубликовано: 29 янв. 2013

Источник: nvd

CVSS2: 3.6

EPSS Низкий

Описание

The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.

Ссылки

http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html
Vendor Advisory
http://osvdb.org/89659
http://support.apple.com/kb/HT5642
Vendor Advisory
http://support.apple.com/kb/HT5643
Vendor Advisory
http://www.securityfocus.com/bid/57595
http://lists.apple.com/archives/security-announce/2013/Jan/msg00000.html
Vendor Advisory
http://lists.apple.com/archives/security-announce/2013/Jan/msg00001.html
Vendor Advisory
http://osvdb.org/89659
http://support.apple.com/kb/HT5642
Vendor Advisory
http://support.apple.com/kb/HT5643
Vendor Advisory
http://www.securityfocus.com/bid/57595

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 5.1.1 (включая)

cpe:2.3:o:apple:tvos:1.0.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:1.1.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.0.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.1.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.2.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.3.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.3.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:2.4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:3.0.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:3.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:3.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.1.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.1.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.2.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.2.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.2.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.4.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.4.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.4.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:4.4.4:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:5.0.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:5.0.1:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:5.0.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:5.1.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 6.0.2 (включая)

cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

3.6 Low

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-599w-q86m-78mc

github

больше 3 лет назад