Lucene search

K
cvelistMitreCVELIST:CVE-2013-3952
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3952

2022-10-0316:14:45
mitre
www.cve.org
xnu kernel
kaslr protection
apple mac os x 10.8.x
local users
proc_pidfdpipeinfo
proc_info system call

5.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

The fill_pipeinfo function in bsd/kern/sys_pipe.c in the XNU kernel in Apple Mac OS X 10.8.x allows local users to defeat the KASLR protection mechanism via the PROC_PIDFDPIPEINFO option to the proc_info system call for a kernel pipe handle.

5.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for CVELIST:CVE-2013-3952