2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2021-1799" ,
"sourceIdentifier" : "product-security@apple.com" ,
"published" : "2021-04-02T19:15:19.617" ,
2023-11-07 21:03:21 +00:00
"lastModified" : "2023-11-07T03:28:51.597" ,
"vulnStatus" : "Modified" ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on arbitrary servers."
} ,
{
"lang" : "es" ,
"value" : "Se abord\u00f3 un problema de redirecci\u00f3n de puertos con una comprobaci\u00f3n de puertos adicional. Este problema es corregido en macOS Big Sur versi\u00f3n 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS versi\u00f3n 14.4, watchOS versi\u00f3n 7.3, iOS versi\u00f3n 14.4 y iPadOS versi\u00f3n 14.4, Safari versi\u00f3n 14.0.3. Un sitio web malicioso puede ser capaz de acceder a puertos restringidos en servidores arbitrarios."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "REQUIRED" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 6.5 ,
"baseSeverity" : "MEDIUM"
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "MEDIUM" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 4.3
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.6 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : true
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.0.3" ,
"matchCriteriaId" : "B785B3FD-A576-4AF5-8500-D1D08D0F4910"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.4" ,
"matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.4" ,
"matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "11.0.1" ,
"versionEndExcluding" : "11.2" ,
"matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "14.4" ,
"matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "7.3" ,
"matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.30.6" ,
"matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
}
]
}
]
}
] ,
"references" : [
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/" ,
"source" : "product-security@apple.com"
2023-04-24 12:24:31 +02:00
} ,
{
2023-11-07 21:03:21 +00:00
"url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/" ,
"source" : "product-security@apple.com"
2023-04-24 12:24:31 +02:00
} ,
{
"url" : "https://security.gentoo.org/glsa/202104-03" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT212146" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT212147" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT212148" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT212149" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://support.apple.com/en-us/HT212152" ,
"source" : "product-security@apple.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
