PT-2018-16536 · Apple · Apple Macos

Lee · Publicado 2018-09-17 · Atualizado 2019-04-05 · CVE-2018-4338

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14

Description A validation issue was addressed with improved input sanitization.

Recommendations For versions prior to macOS Mojave 10.14, update to macOS Mojave 10.14 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-4338

ZDI-18-1057

Produtos afetados

Apple Macos

Referências · 5

• 🔥 https://zerodayinitiative.com/blog/2018/10/24/cve-2018-4338-triggering-an-information-disclosure-on-macos-through-a-broadcom-airport-kext · Exploit
• https://support.apple.com/kb/HT209139 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-4338 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-18-1057 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-4338 · Nota de Segurança