2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-9930" ,
"sourceIdentifier" : "product-security@apple.com" ,
"published" : "2021-04-02T18:15:18.280" ,
"lastModified" : "2021-04-08T17:38:13.973" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. A local user may be able to cause unexpected system termination or read kernel memory."
} ,
{
"lang" : "es" ,
"value" : "Se abord\u00f3 una lectura fuera de l\u00edmites con una comprobaci\u00f3n de la entrada mejorada. Este problema es corregido en macOS Catalina versi\u00f3n 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Un usuario local puede ser capaz de causar la finalizaci\u00f3n inesperada del sistema o leer la memoria del kernel."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.1 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.8 ,
"impactScore" : 5.2
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:C" ,
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "COMPLETE" ,
"baseScore" : 6.6
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 9.2 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-125"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "10.13.6" ,
"matchCriteriaId" : "84791309-ABCF-4701-B4BB-01EDFD6E8E8B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.14" ,
"versionEndExcluding" : "10.14.6" ,
"matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.15" ,
"versionEndExcluding" : "10.15.6" ,
"matchCriteriaId" : "4B5F6281-877C-491C-9C4A-C28C604FB422"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "297D2D0C-EA9D-4B2C-9357-D88DB6C7143A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*" ,
"matchCriteriaId" : "0D845143-1B4D-478B-B83E-8F1664CBCAC3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*" ,
"matchCriteriaId" : "23C6DF6A-9A30-4F9E-BD9C-C19D8551C6DA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*" ,
"matchCriteriaId" : "754A2DF4-8724-4448-A2AB-AC5442029CB7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*" ,
"matchCriteriaId" : "D392C777-1949-4920-B459-D083228E4688"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*" ,
"matchCriteriaId" : "68B0A232-F2A4-4B87-99EB-3A532DFA87DA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*" ,
"matchCriteriaId" : "0DF528F7-0F1E-4E55-A088-91327E3C360C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*" ,
"matchCriteriaId" : "E222445A-D398-47C8-9639-4BAE36B69AA1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*" ,
"matchCriteriaId" : "9425DAC8-038D-4B09-A074-3780AED912FA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*" ,
"matchCriteriaId" : "8EA63C1C-1EEC-4961-A7B7-439D21293B99"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*" ,
"matchCriteriaId" : "B2F5D631-2306-4526-BEE5-22456D95ABAB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*" ,
"matchCriteriaId" : "F79B7361-F2F2-4FA6-A27D-CC8F2D37A726"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-003:*:*:*:*:*:*" ,
"matchCriteriaId" : "09FA5087-C576-483F-B660-F9D155933CC8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.13.6:supplemental_update:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F7E284D-75F5-43E8-ABD4-13DD4F3945F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*" ,
"matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*" ,
"matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*" ,
"matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*" ,
"matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*" ,
"matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*" ,
"matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*" ,
"matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*" ,
"matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*" ,
"matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*" ,
"matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://support.apple.com/en-us/HT211289" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
