Lucene search

PRIOn knowledge basePRION:CVE-2020-29615

HistoryApr 02, 2021 - 6:15 p.m.

Input validation

2021-04-0218:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.9%

JSON

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of service.

CPENameOperatorVersion
ipadoslt14.3
iphone_oslt14.3
mac_os_xge10.15
mac_os_xlt10.15.7
mac_os_xge10.14
mac_os_xlt10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6
mac_os_xeq10.14.6

Name	Operator	Version
ipados	lt	14.3
iphone_os	lt	14.3
mac_os_x	ge	10.15
mac_os_x	lt	10.15.7
mac_os_x	ge	10.14
mac_os_x	lt	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6
mac_os_x	eq	10.14.6

Rows per page:

1-10 of 251

References

support.apple.com/en-us/HT212003

support.apple.com/en-us/HT212005

support.apple.com/en-us/HT212009

support.apple.com/en-us/HT212011

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

30.9%

JSON

Related for PRION:CVE-2020-29615