CVE-2023-32369

CVE-2023-32369 is a macOS SIP bypass triggered by environment-variable poisoning (PERL5OPT and BASH_ENV) that can enable arbitrary action by tampering with system processes during Migration Assistant flow. Microsoft’s writeups detail how systemmigrationd and related components can be coerced to r...

CVE-2023-32412

CVE-2023-32412 involves a use-after-free in a component likely within Apple platform software. Affected: watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 15.7.6/iPadOS 15.7.6 and iOS 16.5/iPadOS 16.5. Root cause: use-after-free memory issue addressed by...

CVE-2022-42860

This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1, macOS Ventura 13. An app may be able to modify protected parts of the file system...

部分Apple产品 安全漏洞

Apple macOS Big Sur and others are products of Apple Inc. in the U.S. Apple macOS Big Sur is the 17th major version of Apple's macOS for the MAC operating system. apple macOS Monterey is the 18th major version of macOS for the McIntosh desktop operating system. Apple macOS Ventura is a desktop...

CVE-2022-46718

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to read sensitive location information...

CVE-2023-32382

CVE-2023-32382 is an out-of-bounds read in Apple’s Model I/O when processing a 3D model, potentially disclosing process memory. Affected on macOS Big Sur 11.7.7, macOS Monterey 12.6.6, and macOS Ventura 13.4. Remediation: apply the corresponding macOS updates (Big Sur 11.7.7 / Monterey 12.6.6 / V...

CVE-2023-32360

CVE-2023-32360 affects the CUPS printing system. The issue is an authentication/state-management weakness that could allow an unauthenticated local user to access recently printed documents. Patches/mitigations are referenced across multiple advisories (e.g., macOS updates fixing the issue; vario...

F5 Networks BIG-IP : Apache HTTPD vulnerability (K000132665)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K000132665 advisory. Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early,...

F5 Networks BIG-IP : Bootstrap vulnerability (K000133673)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.3 / 14.1.2.4 / 15.1.0 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K000133673 advisory. - In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the...

F5 Networks BIG-IP : OpenSSL vulnerability (K000132943)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10 / 16.1.5 / 17.1.1 17.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000132943 advisory. A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be...

F5 Networks BIG-IP : FasterXML vulnerability (K000132725)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000132725 advisory. - In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in...

F5 Networks BIG-IP : BIG-IP DNS profile vulnerability (K37708118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K37708118 advisory. - On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before...

F5 Networks BIG-IP : BIG-IP APM OAuth vulnerability (K20717585)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3. It is, therefore, affected by a vulnerability as referenced in the K20717585 advisory. - On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the...

F5 Networks BIG-IP : OpenJDK vulnerability (K000134793)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000134793 advisory. Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Concurrency. Support...

F5 Networks BIG-IP : OpenSSL vulnerability (K000135178)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000135178 advisory. - Issue summary: Processing some specially crafted ASN.1 object identifiers or data containing them may be very slow...

PT-2023-3221

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 9.5.2 watchOS versions prior to 8.8.1 macOS Big Sur versions prior to 11.7.8 macOS Monterey versions prior to 12.6.7 macOS Ventura versions prior to 13.4.1 iOS versions prior to 15.7.7 iOS versions prior to 16.5.1...

Apple macOS Big Sur 输入验证错误漏洞

Apple macOS Big Sur is the 17th major release of Apple's macOS, the operating system used by Apple Inc. for the MAC. Apple macOS Big Sur suffers from an input validation error vulnerability that stems from the presence of an integer overflow issue, where an application may be able to execute...

On the Need for an AI Public Option

Artificial intelligence will bring great benefits to all of humanity. But do we really want to entrust this revolutionary technology solely to a small group of US tech companies? Silicon Valley has produced no small number of moral disappointments. Google retired its "dont be evil" pledge before...

F5 Networks BIG-IP : BIG-IP iRules vulnerability (K69940053)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K69940053 advisory. - In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server,...

F5 Networks BIG-IP : BIG-IP and BIG-IQ mcpd vulnerability (K64829234)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.3 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K64829234 advisory. - In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all...