PT-2023-2890 · Apple · Ios+7
Eloi Benoist-Vanderbeken
·
Publicado
2023-05-18
·
Atualizado
2024-09-27
·
CVE-2023-32413
CVSS v3.1
7.0
Alta
| Vetor | AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
watchOS versions prior to 9.5
tvOS versions prior to 16.5
macOS Ventura versions prior to 13.4
macOS Big Sur versions prior to 11.7.7
macOS Monterey versions prior to 12.6.6
iOS versions prior to 15.7.6 and prior to 16.5
iPadOS versions prior to 15.7.6 and prior to 16.5
Description
A race condition issue in the operating system kernel of MacOS, iOS, tvOS, iPadOS, and watchOS is caused by synchronization errors when using shared resources. This issue may allow an attacker to execute arbitrary code and gain root privileges. The problem is related to improved state handling.
Recommendations
For watchOS versions prior to 9.5, update to watchOS 9.5 or later.
For tvOS versions prior to 16.5, update to tvOS 16.5 or later.
For macOS Ventura versions prior to 13.4, update to macOS Ventura 13.4 or later.
For macOS Big Sur versions prior to 11.7.7, update to macOS Big Sur 11.7.7 or later.
For macOS Monterey versions prior to 12.6.6, update to macOS Monterey 12.6.6 or later.
For iOS versions prior to 15.7.6 and prior to 16.5, update to iOS 15.7.6 or iOS 16.5 or later.
For iPadOS versions prior to 15.7.6 and prior to 16.5, update to iPadOS 15.7.6 or iPadOS 16.5 or later.
Exploit
Correção
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apple Macos
Ios
Ipados
Macos Big Sur
Macos Monterey
Macos Ventura
Tvos
Watchos