CVE-2021-30817

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with...

CVE-2021-30824

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges...

Input validation

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service...

Input validation

A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able to access data about the accounts the user is using Family Sharing with...

CVE-2021-30821

CVE-2021-30821 is a memory corruption vulnerability in macOS kernel handling that could allow a malicious app to execute arbitrary code with kernel privileges. It is addressed by macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The NVD entry notes a local attack...

CVE-2021-30824

CVE-2021-30824 is a memory corruption issue in macOS components that was fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. The vulnerability could allow a malicious application to execute arbitrary code with kernel privileges. Affected context and exact ...

CVE-2021-30817

CVE-2021-30817 concerns macOS Big Sur 11.5. A permissions issue was addressed with improved validation, potentially allowing a malicious application to access data about the accounts a user is using with Family Sharing. The public documentation assigns this to macOS Big Sur 11.5 as the fix versio...

CVE-2021-1821

CVE-2021-1821 is a logic issue in Apple OS components (notably networking-related paths) that was mitigated by state-management fixes. The vulnerability allowed denial of service when a user visited a malicious webpage, and Apple patched it in watchOS 7.6 and macOS Big Sur 11.5. The Apple securit...

CVE-2020-29629

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory...

CVE-2020-9897

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a maliciously crafted PDF may lead to arbitrary code execution...

CVE-2020-9897

CVE-2020-9897 affects Apple platforms via CoreGraphics. It describes an out-of-bounds write triggered by processing a maliciously crafted PDF, leading to potential arbitrary code execution. Root cause identified as improper input validation in the PDF handling path. Affected products include iOS/...

CVE-2020-10005

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. An attacker in a privileged network position may be able to perform denial of service...

F5 Networks BIG-IP : iApps vulnerability (K11542555)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4. It is, therefore, affected by a vulnerability as referenced in the K11542555 advisory. An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. readxbmbody in...

F5 Networks BIG-IP : Resource Administrator or Administrator role authenticated local command execution vulnerability (K04234247)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4 / 14.1.4 / 15.1.3 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K04234247 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4,...

F5 Networks BIG-IP : glibc vulnerability (K68251873)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K68251873 advisory. The iconv feature in the GNU C Library aka glibc or libc6 through 2.32, when processing invalid multi- byte...

F5 Networks BIG-IP : Apache HTTPD vulnerability (K72382141)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.7 / 16.1.4 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K72382141 advisory. - Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Serve...

F5 Networks BIG-IP : cURL vulnerability (K61186963)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K61186963 advisory. curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP...

F5 Networks BIG-IP : Node.js vulnerabilities (K53225395)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K53225395 advisory. CVE-2021-3672Missing input validation of host names returned by Domain Name Servers DNS in the c-ares libra...

F5 Networks BIG-IP : Linux kernel vulnerability (K32380005)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4. It is, therefore, affected by a vulnerability as referenced in the K32380005 advisory. The flowdissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, a...

F5 Networks BIG-IP : Intel I210 network adapter vulnerability (K31445234)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K31445234 advisory. - Improper access control in the firmware for the IntelR Ethernet I210 Controller series of network adapters before...