CVE-2023-32389

Опубликовано: 23 июн. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to disclose kernel memory.

Ссылки

https://support.apple.com/en-us/HT213757
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213758
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213761
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213764
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213757
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213758
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213761
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT213764
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.5 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.4 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 16.5 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 9.5 (исключая)

EPSS

Процентиль: 17%

0.00054

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-125

Связанные уязвимости

GHSA-w2jx-6xv7-8634

CVSS3: 5.5

github

больше 2 лет назад

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory

EPSS

Процентиль: 17%

0.00054

Низкий

5.5 Medium

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-125