PT-2019-19059 · Apple · Apple Macos

Dr. Silvio Cesare · Published 2019-12-18 · Updated 2019-12-22 · CVE-2019-8508

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4

Description A buffer overflow issue was addressed through improved bounds checking, which could allow arbitrary code execution with system privileges when mounting a maliciously crafted NFS network share.

Recommendations For versions prior to 10.14.4, update to macOS Mojave 10.14.4 to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2019-8508

Affected Products

Apple Macos

References · 3

• https://support.apple.com/HT209600 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8508 · Security Note