PT-2023-8413 · Apple · Apple Macos+2

Zweig · Publicado 2023-09-26 · Atualizado 2024-08-30 · CVE-2023-42870

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14 iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is related to a use-after-free problem, which is associated with the improper use of memory after it has been freed. This can potentially allow an attacker to execute arbitrary code with kernel privileges. The issue has been addressed with improved memory management.

Recommendations For macOS versions prior to 14, update to macOS Sonoma 14 to resolve the issue. For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2024-00686

CVE-2023-42870

Produtos afetados

Apple Macos

Ios

Ipados

Referências · 9

• https://bdu.fstec.ru/vul/2024-00686 · Nota de Segurança
• https://support.apple.com/en-us/HT213938 · Aviso do Fabricante
• https://support.apple.com/kb/HT213938 · Nota
• https://t.me/cvenotify/67643 · Publicação no Telegram
• https://support.apple.com/kb/HT213940 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-42870 · Nota de Segurança
• https://support.apple.com/en-us/HT213940 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1745211725442658586 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-42870 · Aviso do Fabricante