PT-2018-1252 · Apple · Xcode+1

Publicado 2018-03-29 · Atualizado 2018-05-04 · CVE-2018-4164

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 9.3

Description The issue involves the LLVM component and is related to insecure privilege management. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Xcode versions prior to 9.3, update to version 9.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the LLVM component to minimize the risk of exploitation.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BDU:2018-00725

CVE-2018-4164

Produtos afetados

Llvm

Xcode

Referências · 9

• https://osv.dev/vulnerability/CVE-2018-4164 · Aviso do Fabricante
• http://lists.llvm.org/pipermail/llvm-commits · Nota
• http://securitytracker.com/id/1040610 · Nota
• https://developer.apple.com/library/content/releasenotes/DeveloperTools/RN-Xcode/Chapters/Introduction.html · Aviso do Fabricante
• https://support.apple.com/HT208699 · Aviso do Fabricante
• http://releases.llvm.org · Nota
• https://bdu.fstec.ru/vul/2018-00725 · Nota de Segurança
• http://securityfocus.com/bid/103583 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-4164 · Nota de Segurança