CVE-2024-44165

Опубликовано: 17 сент. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. Network traffic may leak outside a VPN tunnel.

Ссылки

https://support.apple.com/en-us/121234
Vendor Advisory
https://support.apple.com/en-us/121238
Vendor Advisory
https://support.apple.com/en-us/121246
Vendor Advisory
https://support.apple.com/en-us/121247
Vendor Advisory
https://support.apple.com/en-us/121249
Vendor Advisory
https://support.apple.com/en-us/121250
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Sep/32
http://seclists.org/fulldisclosure/2024/Sep/33
http://seclists.org/fulldisclosure/2024/Sep/36
http://seclists.org/fulldisclosure/2024/Sep/39
http://seclists.org/fulldisclosure/2024/Sep/40
http://seclists.org/fulldisclosure/2024/Sep/41

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 13.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия от 14.0 (включая) до 14.7 (исключая)

Конфигурация 2

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

Конфигурация 3

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 17.7 (исключая)

Конфигурация 4

cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

Версия до 2.0 (исключая)

EPSS

Процентиль: 53%

0.00305

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-3m65-xvh4-3hm8