CVE-2024-23234

Опубликовано: 08 мар. 2024

Источник: nvd

CVSS3: 6.7

CVSS3: 7.8

EPSS Низкий

Описание

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to execute arbitrary code with kernel privileges.

Ссылки

http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/22
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/HT214085
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/22
Mailing List
http://seclists.org/fulldisclosure/2024/Mar/23
Mailing List
https://support.apple.com/en-us/HT214083
Vendor Advisory
https://support.apple.com/en-us/HT214084
Vendor Advisory
https://support.apple.com/en-us/HT214085
Vendor Advisory
https://support.apple.com/kb/HT214083
https://support.apple.com/kb/HT214084
https://support.apple.com/kb/HT214085

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 12.0 (включая) до 12.7.4 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 13.0 (включая) до 13.6.5 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.4 (исключая)

EPSS

Процентиль: 3%

0.00016

Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

GHSA-rvw4-7ggj-6vq9

CVSS3: 7.8

github

почти 2 года назад

EPSS

Процентиль: 3%

0.00016

Низкий

6.7 Medium

CVSS3

7.8 High

CVSS3

Дефекты

CWE-787