PT-2020-16836 · Apple · Macos Big Sur+1

Stephan Marais · Published 2020-11-12 · Updated 2021-03-11 · CVE-2020-27898

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.0.1

Description A denial of service issue was addressed with improved state handling, which may allow an attacker to bypass Managed Frame Protection.

Recommendations For macOS Big Sur versions prior to 11.0.1, update to macOS Big Sur 11.0.1 to resolve the issue.

Fix

DoS

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2020-27898

Affected Products

Apple Macos

Macos Big Sur

References · 13

• https://osv.dev/vulnerability/CVE-2020-27898 · Vendor Advisory
• https://support.apple.com/kb/HT212011 · Vendor Advisory
• https://support.apple.com/en-us/HT211931 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27898 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27898 · Note
• https://t.me/cvenotify/6820 · Telegram Post
• https://support.apple.com/en-us/102846 · Note
• https://t.me/cvenotify/6772 · Telegram Post
• https://support.apple.com/en-us/HT212011 · Note
• https://t.me/cvenotify/6953 · Telegram Post
• https://support.apple.com/en-us/103052 · Note
• http://seclists.org/fulldisclosure/2020/Dec/32 · Note
• http://seclists.org/fulldisclosure/2020/Dec/26 · Note