PT-2020-16876 · Apple · Dtrace+2

Kleest + 1 · Published 2020-12-14 · Updated 2021-04-08 · CVE-2020-27949

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.1 Security Update 2020-001 Catalina (affected versions not specified) Security Update 2020-007 Mojave (affected versions not specified)

Description The issue allows a malicious application to cause unexpected changes in memory belonging to processes traced by DTrace. This is due to insufficient checks that can be exploited to perform unauthorized actions.

Recommendations For macOS Big Sur, update to version 11.1 or later. For Security Update 2020-001 Catalina, apply the security update. For Security Update 2020-007 Mojave, apply the security update. As a temporary workaround, consider restricting the use of DTrace until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-27949

Affected Products

Dtrace

Apple Macos

Macos Big Sur

References · 7

• 🔥 https://github.com/seemoo-lab/dtrace-memaccess_cve-2020-27949 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-27949 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27949 · Vendor Advisory
• https://support.apple.com/en-us/HT212011 · Vendor Advisory
• https://support.apple.com/en-us/103052 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27949 · Note
• https://t.me/cybersecuritytechnologies/2348 · Telegram Post