Lucene search
AppleCVE-2021-30796HistorySep 08, 2021 - 2:15 p.m.
CVE-2021-30796
2021-09-0814:15:11
apple
web.nvd.nist.gov
68
cve-2021-30796
logic issue
ios
macos
security update
denial of service
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.002
Percentile
53.2%
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave. Processing a maliciously crafted image may lead to a denial of service.
Affected configurations
Node
appleiphone_osRange<14.7
ORapplemac_os_xMatch10.14
ORapplemac_os_xMatch10.14.0
ORapplemac_os_xMatch10.14.1
ORapplemac_os_xMatch10.14.2
ORapplemac_os_xMatch10.14.3
ORapplemac_os_xMatch10.14.4
ORapplemac_os_xMatch10.14.4beta4
ORapplemac_os_xMatch10.14.5
ORapplemac_os_xMatch10.14.6
ORapplemac_os_xMatch10.14.6-
ORapplemac_os_xMatch10.14.6security_update_2019-001
ORapplemac_os_xMatch10.14.6security_update_2019-002
ORapplemac_os_xMatch10.14.6security_update_2019-004
ORapplemac_os_xMatch10.14.6security_update_2019-005
ORapplemac_os_xMatch10.14.6security_update_2019-006
ORapplemac_os_xMatch10.14.6security_update_2019-007
ORapplemac_os_xMatch10.14.6security_update_2020-001
ORapplemac_os_xMatch10.14.6security_update_2020-002
ORapplemac_os_xMatch10.14.6security_update_2020-003
ORapplemac_os_xMatch10.14.6security_update_2020-004
ORapplemac_os_xMatch10.14.6security_update_2020-005
ORapplemac_os_xMatch10.14.6security_update_2020-006
ORapplemac_os_xMatch10.14.6security_update_2020-007
ORapplemac_os_xMatch10.14.6security_update_2021-001
ORapplemac_os_xMatch10.14.6security_update_2021-002
ORapplemac_os_xMatch10.14.6security_update_2021-003
ORapplemac_os_xMatch10.14.6security_update_2021-004
ORapplemac_os_xMatch10.15
ORapplemac_os_xMatch10.15.1
ORapplemac_os_xMatch10.15.2
ORapplemac_os_xMatch10.15.3
ORapplemac_os_xMatch10.15.4
ORapplemac_os_xMatch10.15.5
ORapplemac_os_xMatch10.15.6
ORapplemac_os_xMatch10.15.6-
ORapplemac_os_xMatch10.15.6supplemental_update
ORapplemac_os_xMatch10.15.7
ORapplemac_os_xMatch10.15.7-
ORapplemac_os_xMatch10.15.7security_update_2020
ORapplemac_os_xMatch10.15.7security_update_2020-001
ORapplemac_os_xMatch10.15.7security_update_2020-005
ORapplemac_os_xMatch10.15.7security_update_2020-007
ORapplemac_os_xMatch10.15.7security_update_2021-001
ORapplemac_os_xMatch10.15.7security_update_2021-002
ORapplemac_os_xMatch10.15.7security_update_2021-003
ORapplemacosRange11.0–11.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | iphone_os | * | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14 | cpe:2.3:o:apple:mac_os_x:10.14:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.0 | cpe:2.3:o:apple:mac_os_x:10.14.0:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.1 | cpe:2.3:o:apple:mac_os_x:10.14.1:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.2 | cpe:2.3:o:apple:mac_os_x:10.14.2:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.3 | cpe:2.3:o:apple:mac_os_x:10.14.3:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.4 | cpe:2.3:o:apple:mac_os_x:10.14.4:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.4 | cpe:2.3:o:apple:mac_os_x:10.14.4:beta4:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.5 | cpe:2.3:o:apple:mac_os_x:10.14.5:*:*:*:*:*:*:* |
| apple | mac_os_x | 10.14.6 | cpe:2.3:o:apple:mac_os_x:10.14.6:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Security Update - Catalina",
"vendor": "Apple",
"versions": [
{
"lessThan": "2021",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "iOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "14.7",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "11.5",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "2021",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-30796
2021-09-08 14:15:11
prion
prion
Input validation
2021-09-08 14:15:00
zdi
zdi
cvelist
cvelist
CVE-2021-30796
2021-09-08 13:39:08
nessus
nessus
macOS 10.14.x < 10.14.6 Mojave Security Update 2021-005 (HT212603)
2021-07-23 00:00:00
macOS 10.15.x < Catalina Security Update 2021-004 Catalina (HT212600)
2021-07-23 00:00:00
macOS 11.x < 11.5 Multiple Vulnerabilities (HT212602)
2021-07-23 00:00:00
apple
apple
About the security content of Security Update 2021-005 Mojave
2021-07-21 00:00:00
About the security content of Security Update 2021-004 Catalina
2021-07-21 00:00:00
About the security content of iOS 14.7 and iPadOS 14.7
2021-07-21 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT212603)
2022-09-22 00:00:00
Apple Mac OS X Security Update (HT212600)
2022-09-22 00:00:00
Apple Mac OS X Security Update (HT212602)
2022-09-22 00:00:00
threatpost
threatpost
Apple Issues Urgent iPhone Updates; None for Pegasus Zero-Day
2021-07-22 16:18:25
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
AI Score
6.3
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for CVE-2021-30796