CVE-2020-9983

Опубликовано: 16 окт. 2020

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

Ссылки

http://seclists.org/fulldisclosure/2020/Nov/18
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/19
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/22
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/23/3
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
https://security.gentoo.org/glsa/202012-10
Third Party Advisory
https://support.apple.com/HT211845
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT211843
Vendor Advisory
https://support.apple.com/kb/HT211844
Vendor Advisory
https://support.apple.com/kb/HT211850
Vendor Advisory
https://support.apple.com/kb/HT211935
Vendor Advisory
https://support.apple.com/kb/HT211952
Vendor Advisory
https://www.debian.org/security/2020/dsa-4797
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/18
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/19
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Nov/22
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2020/11/23/3
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:icloud:11.5:*:*:*:*:windows:*:*

cpe:2.3:a:apple:itunes:12.10.9:*:*:*:*:windows:*:*

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Версия до 14.0 (исключая)

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 14.0 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 14.0 (исключая)

cpe:2.3:o:apple:tvos:14.0:*:*:*:*:*:*:*

cpe:2.3:o:apple:watchos:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00693

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-9983

CVSS3: 8.8

ubuntu

больше 4 лет назад

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

CVE-2020-9983

CVSS3: 8.8

redhat

больше 4 лет назад

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

CVE-2020-9983

CVSS3: 8.8

debian

больше 4 лет назад

An out-of-bounds write issue was addressed with improved bounds checki ...

GHSA-6c43-4qm7-f3r6

CVSS3: 8.8

github

около 3 лет назад

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

BDU:2020-04786

CVSS3: 8.8

fstec

больше 4 лет назад

Уязвимость компонента WebKit браузера Apple Safari, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 71%

0.00693

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787