PT-2020-11262 · Apple · Macos Mojave+5

Trevor Spiniolas + 1 · Published 2020-10-27 · Updated 2020-10-29 · CVE-2019-8538

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.2 macOS Mojave versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra Security Update versions prior to 2019-002 for Sierra iOS versions prior to 12.2

Description A denial of service issue was addressed with improved validation. Processing a maliciously crafted vcf file may lead to a denial of service.

Recommendations For watchOS versions prior to 5.2, update to watchOS 5.2 to resolve the issue. For macOS Mojave versions prior to 10.14.4, update to macOS Mojave 10.14.4 to resolve the issue. For Security Update versions prior to 2019-002 for High Sierra, apply Security Update 2019-002 to resolve the issue. For Security Update versions prior to 2019-002 for Sierra, apply Security Update 2019-002 to resolve the issue. For iOS versions prior to 12.2, update to iOS 12.2 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8538

Affected Products

High Sierra

Security Update

Sierra

Ios

Macos Mojave

Watchos

References · 6

• https://support.apple.com/en-us/HT209599 · Vendor Advisory
• https://support.apple.com/en-us/HT209602 · Vendor Advisory
• https://support.apple.com/en-us/HT209600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8538 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8538 · Vendor Advisory
• https://t.me/cibsecurity/15633 · Telegram Post