部分Apple产品 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. A security vulnerability exists in some Apple products, which stems from an application that may be able to gain root privileges. The following products and versions are affected: macOS Big Sur before 11.7.7, macOS...

PT-2023-23764 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.7 macOS versions prior to 12.6.6 macOS versions prior to 13.4 Description: An out-of-bounds read issue was addressed through improved input validation. Processing a 3D model may lead to the disclosure of process...

PT-2023-21622 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 16.5 iPadOS versions prior to 16.5 Description...

PT-2023-23766 · Apple · Macos Monterey +6

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6...

PT-2023-2894 · Apple · Macos Monterey +4

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions 11.7.7 and earlier macOS Monterey versions 12.6.6 and earlier macOS Ventura versions 13.4 and earlier Description: A logic issue was addressed with improved checks, which may allow an app to gain root privileges. The...

PT-2023-2893 · Apple · Macos Monterey +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS...

F5 Networks BIG-IP : BIG-IP iQuery mesh vulnerability (K000132972)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.4 / 15.1.8.2 / 16.1.3.4 / 17.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000132972 advisory. - When DNS is provisioned, an authenticated remote command execution vulnerability exists i...

PT-2023-19813 · Facebook · Hermes

Name of the Vulnerable Software and Affected Versions: Hermes versions prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 Description: A use-after-free in BigIntPrimitive addition could have been used by an attacker to leak raw data from Hermes VM’s heap. This issue is only exploitable in...

PT-2023-2890 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...

PT-2023-8344 · Apple · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.6.6 macOS versions prior to 11.7.7 macOS versions prior to 13.4 Description: The issue is related to incorrect code generation management in the AppleMobileFileIntegrity component of the macOS operating system...

部分Apple产品 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in some Apple products, which stems from an application that may be able to modify protected portions of the file system. The following products and versions are affected: iOS...

About the security content of macOS Big Sur 11.7.7

About the security content of macOS Big Sur 11.7.7 This document describes the security content of macOS Big Sur 11.7.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

部分Apple产品 缓冲区错误漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A buffer error vulnerability exists in some Apple products, which stems from the fact that processing 3D models may lead to arbitrary code execution. The following products and versions are affected: macOS Big...

golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...

golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

An uncontrolled resource consumption flaw was found in Golang math/big. A too-short encoded message can cause a panic in Float.GobDecode and Rat.GobDecode in math/big in Go, potentially allowing an attacker to create a denial of service, impacting availability...

F5 BIG-IP Edge Client Windows Component Installer < 7.2.4.1 Improper Certificate Validation (K000132539)

The version of the Big-IP Edge Client Windows Component Installer installed on the remote Windows host is before 7.2.4.1. An improper certificate validation vulnerability exists in BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. CVE-2023-2446...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows and macOS vulnerability (K000132539)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.5 / 15.1.9 / 16.1.3.5 / 17.1.0.2. It is, therefore, affected by a vulnerability as referenced in the K000132539 advisory. - An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windo...

F5 Networks BIG-IQ iControl REST Arbitrary File Upload (K000132719)

The version of F5 Networks BIG-IQ Centralized Management installed on the remote host is affected by an arbitrary file upload vulnerability as referenced in the K000132719 advisory. An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ system can upload arbitrary files using an...

ALSA-2023:2758 Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-1962 golang:...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000132768)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.4 / 15.1.8.2 / 16.1.3.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K000132768 advisory. - A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configurati...