CVE-2020-9964

Опубликовано: 16 окт. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory.

Ссылки

http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List
Third Party Advisory
https://support.apple.com/HT211850
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List
Third Party Advisory
https://support.apple.com/HT211850
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 14.0 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 14.0 (исключая)

EPSS

Процентиль: 15%

0.00048

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-665

Связанные уязвимости

GHSA-4pp8-9mjg-pq9p