Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3952
cve-2013-3952
xnu kernel
apple
mac os x 10.8.x
kaslr
local users
nvd
vulnerability
security
proc_pidfdpipeinfo
proc_info system call
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.
Affected configurations
Node
applemac_os_xMatch10.8.0
ORapplemac_os_xMatch10.8.1
ORapplemac_os_xMatch10.8.2
ORapplemac_os_xMatch10.8.3
ORapplemac_os_xMatch10.8.4
Related
nvd
nvd
CVE-2013-3952
2013-06-05 14:39:55
prion
prion
Design/Logic Flaw
2013-06-05 14:39:00
cvelist
cvelist
CVE-2013-3952
2022-10-03 16:14:45
seebug
seebug
Apple Mac OS X XNU内核 ‘fill_pipeinfo’函数安全漏洞
2013-06-07 00:00:00
openvas
openvas
Apple Mac OS X Multiple Vulnerabilities - 01 (Jan 2014)
2014-01-20 00:00:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2013-3952