Lucene search

[email protected]NVD:CVE-2023-42884

HistoryDec 12, 2023 - 1:15 a.m.

CVE-2023-42884

2023-12-1201:15:11

[email protected]

web.nvd.nist.gov

cve-2023-42884

redaction

sensitive information

macos sonoma

ios

ipados

macos ventura

tvos

kernel memory disclosure

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

25.4%

JSON

This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. An app may be able to disclose kernel memory.

Affected configurations

NVD

Node

appleipadosRange<16.7.3

appleipadosRange17.0–17.2

appleiphone_osRange<16.7.3

appleiphone_osRange17.0–17.2

applemacosRange13.0–13.6.3

applemacosRange14.0–14.2

appletvosRange<17.2

References

seclists.org/fulldisclosure/2023/Dec/10

seclists.org/fulldisclosure/2023/Dec/12

seclists.org/fulldisclosure/2023/Dec/7

seclists.org/fulldisclosure/2023/Dec/8

seclists.org/fulldisclosure/2023/Dec/9

support.apple.com/en-us/HT214034

support.apple.com/en-us/HT214035

support.apple.com/en-us/HT214036

support.apple.com/en-us/HT214038

support.apple.com/en-us/HT214040

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

25.4%

JSON

Related for NVD:CVE-2023-42884

cvelist1 prion1 cve1 apple7 nessus2 openvas2