xattr-oob-swap

xattr-oob-swap CVE-2020-27904: macOS 10.15.x 以前向けの tfp0 バグです。 BlackHat ASIA 2021 での私の 講演 用のデモエクスプロイトコードです。 この脆弱性は macOS Big Sur 11.0 および最新の 10.15&10.14 セキュリティアップデートで修正されました。 保証 自己責任で使用してください。macOS がパニックになります。 セキュリティ研究者専用に作成しています。 現在の状態 tfp0 を取得します。macOS 10.15.2 19C57 、16 GB RAM の MacBook Pro...

CVE-2020-27904

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

Exploit for CVE-2020-27904

xattr-oob-swap CVE-2020-27904: a tfp0 bug for macOS 10.15.x a...

macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-001 Mojave, 10.15.x prior to 10.15.7 Security Update 2021-001 Catalina, or 11.x prior to 11.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A logic...

CVE-2020-27904

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-27904

Summary of CVE-2020-27904 : Apple macOS Big Sur 11.0.1 fixes a kernel-level memory corruption issue described as a logic issue that could allow an application to execute arbitrary code with kernel privileges. The root cause is disclosed as memory corruption in kernel components and was addressed ...