xattr-oob-swap

xattr-oob-swap CVE-2020-27904: macOS 10.15.x 이하를 위한 tfp0 버그입니다. BlackHat ASIA 2021에서의 발표를 위한 데모 익스플로잇 코드입니다. 이 취약점은 macOS Big Sur 11.0 및 최신 10.15 및 10.14 보안 업데이트에서 수정되었습니다. 보증 사용에 따른 책임은 본인에게 있습니다. 이로 인해 macOS가 패닉 상태에 빠질 수 있습니다. 보안 연구자만을 위해 만들었습니다. 현재 상태 tfp0 획득. macOS 10.15.2 19C57 , 16GB RAM...

CVE-2020-27904

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

Exploit for CVE-2020-27904

xattr-oob-swap CVE-2020-27904: a tfp0 bug for macOS 10.15.x a...

macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.6 Security Update 2021-001 Mojave, 10.15.x prior to 10.15.7 Security Update 2021-001 Catalina, or 11.x prior to 11.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A logic...

CVE-2020-27904

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-27904

Summary of CVE-2020-27904 : Apple macOS Big Sur 11.0.1 fixes a kernel-level memory corruption issue described as a logic issue that could allow an application to execute arbitrary code with kernel privileges. The root cause is disclosed as memory corruption in kernel components and was addressed ...