PT-2017-9229 · Apple · Apple Macos

Ulf Frisk + 1 · Publicado 2017-04-02 · Atualizado 2017-07-12 · CVE-2016-7585

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4

Description The issue involves mishandling of DMA in the "EFI" component, allowing physically proximate attackers to discover the FileVault 2 encryption password via a crafted Thunderbolt adapter.

Recommendations For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2016-7585

Produtos afetados

Apple Macos

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-7585 · Nota de Segurança
• https://support.apple.com/HT207615 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-7585 · Aviso do Fabricante
• http://securitytracker.com/id/1038138 · Nota
• http://securityfocus.com/bid/97140 · Nota