CVE-2021-1882 - 漏洞详情

CVE-2021-1882 (CNNVD-202104-1953)

CRITICAL

中文标题:

Apple macOS 缓冲区错误漏洞

英文标题:

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Up...

CVSS分数: 9.8

发布时间: 2021-09-08 14:47:55

漏洞类型: 缓冲区错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Apple macOS是美国苹果（Apple）公司的一套专为Mac计算机所开发的专用操作系统。 macOS 存在缓冲区错误漏洞，该漏洞源于Foundation组件内部的边界错误。以下产品及版本受到影响：macOS: 10.15 19A583, 10.15 19A602, 10.15 19A603, 10.15.1 19B88, 10.15.2 19C57, 10.15.3 19D76, 10.15.4 19E266, 10.15.4 19E287, 10.15.5 19F96, 10.15.5 19F101, 10.15.6 19G73, 10.15.6 19G2021, 10.15.7 19H2, 10.15.7 19H4, 10.15.7 19H15, 10.15.7 19H114, 10.15.7 19H512, 10.15.7 19H524, 11.0 20A2411, 11.0.1 20B29, 11.0.1 20B50, 11.1 20C69, 11.2 20D64, 11.2.1 20D74, 11.2.1 20D75, 11.2.2 20D80, 11.2.3 20D91 。

英文描述:

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.

CWE类型:

CWE-787

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Apple	iOS and iPadOS	-	< 14.5	-	`cpe:2.3:a:apple:ios_and_ipados::::::::`
Apple	tvOS	-	< 14.5	-	`cpe:2.3:a:apple:tvos::::::::`
Apple	watchOS	-	< 7.4	-	`cpe:2.3:a:apple:watchos::::::::`
Apple	macOS	-	< 11.3	-	`cpe:2.3:a:apple:macos::::::::`
apple	ipados	*	-	-	`cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	*	-	-	`cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	*	-	-	`cpe:2.3:o:apple:mac_os_x::::::::`
apple	mac_os_x	10.15.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.6:-::::::`
apple	mac_os_x	10.15.7	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::`
apple	macos	*	-	-	`cpe:2.3:o:apple:macos::::::::`
apple	tvos	*	-	-	`cpe:2.3:o:apple:tvos::::::::`
apple	watchos	*	-	-	`cpe:2.3:o:apple:watchos::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）