PT-2021-18900 · Apple · Apple Macos

Richard Warren · Published 2021-10-25 · Updated 2022-10-11 · CVE-2021-30833

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 12.0.1

Description The issue allows an attacker to write arbitrary files by unpacking a maliciously crafted archive. This is possible due to insufficient checks, which have been improved in the fixed version.

Recommendations For versions prior to 12.0.1, update to macOS Monterey 12.0.1 to resolve the issue. As a temporary workaround, consider avoiding the unpacking of archives from untrusted sources until the update is applied.

Fix

Related Identifiers

CVE-2021-30833

Affected Products

Apple Macos

References · 20

• https://support.apple.com/en-us/HT212869 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30833 · Security Note
• https://support.apple.com/kb/HT212871 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30833 · Vendor Advisory
• https://support.apple.com/kb/HT212872 · Vendor Advisory
• https://support.apple.com/en-us/103236 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30833 · Note
• https://support.apple.com/en-us/103164 · Note
• https://t.me/cybersecuritytechnologies/4623 · Telegram Post
• https://support.apple.com/en-us/HT212872 · Note
• https://t.me/cibsecurity/31426 · Telegram Post
• https://t.me/rnetsec/15931 · Telegram Post
• https://t.me/rnetsec/16574 · Telegram Post
• https://t.me/secharvester/12168 · Telegram Post
• https://t.me/defcon_news/97875 · Telegram Post