PT-2020-8925 · Apple · Sierra+2

Liu Long · Published 2020-10-27 · Updated 2020-10-30 · CVE-2018-4452

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.3 Security Update versions prior to 2019-001 for High Sierra and Sierra

Description A memory consumption issue was addressed with improved memory handling, which could allow a malicious application to execute arbitrary code with system privileges.

Recommendations For macOS versions prior to 10.14.3, update to macOS Mojave 10.14.3 or later to resolve the issue. For High Sierra, apply Security Update 2019-001 or later. For Sierra, apply Security Update 2019-001 or later.

Fix

Related Identifiers

CVE-2018-4452

Affected Products

High Sierra

Sierra

Apple Macos

References · 4

• https://osv.dev/vulnerability/CVE-2018-4452 · Vendor Advisory
• https://support.apple.com/en-us/HT209446 · Vendor Advisory
• https://support.apple.com/en-us/HT209341 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4452 · Security Note