CVE-2013-3954
Published Jun 5, 2013
Last updated 11 years ago
Overview
- Description
- The posix_spawn system call in the XNU kernel in Apple Mac OS X 10.8.x does not properly validate the data for file actions and port actions, which allows local users to (1) cause a denial of service (panic) via a size value that is inconsistent with a header count field, or (2) obtain sensitive information from kernel heap memory via a certain size value in conjunction with a crafted buffer.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.9
- Impact score
- 10
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2082D62-3821-4DBA-8690-67489F44C38D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F0DB1BC-DC16-423E-B0C7-8E9C996A50B5"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E59315BA-B9F1-46A5-86E7-8BE2ED97BA4F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55841123-F78F-42E0-8D40-C688C4B4D29C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "252640D3-5CB8-4C3D-9E8B-ED452293C805"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D746FCB4-9ACA-425D-929F-F46EDDEC1B56",
"versionEndIncluding": "6.1.4"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7B6D035-38A9-4C0B-9A9D-CAE3BF1CA56D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C5B94E7-2C24-4913-B65E-8D8A0DE2B80B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E28FB0CB-D636-4F85-B5F7-70EC30053925"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EC16D1C-065A-4D1A-BA6E-528A71DF65CC"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27319629-171F-42AA-A95F-2D71F78097D0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F7AEFAB-7BB0-40D8-8BA5-71B374EB69DB"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "297F9438-0F04-4128-94A8-A504B600929E"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8618621-F871-4531-9F6C-7D60F2BF8B75"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "824DED2D-FA1D-46FC-8252-6E25546DAE29"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1641DDFA-3BF1-467F-8EC3-98114FF9F07B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF40CDA4-4716-4815-9ED0-093FE266734C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D61644E2-7AF5-48EF-B3D5-59C7B2AD1A58"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D06D54D-97FD-49FD-B251-CC86FBA68CA6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25A5D868-0016-44AB-80E6-E5DF91F15455"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C14EEA4-6E35-4EBE-9A43-8F6D69318BA0"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B15E90AE-2E15-4BC2-B0B8-AFA2B1297B03"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E0C0A8D-3DDD-437A-BB3D-50FAEAF6C440"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "863383DA-0BC6-4A96-835A-A96128EC0202"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CFF5BE7-2BF6-48CE-B74B-B1A05383C10F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51D3BE2B-5A01-4AD4-A436-0056B50A535D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A20F171-79FE-43B9-8309-B18341639FA1"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "126EF22D-29BC-4366-97BC-B261311E6251"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B3DD7B3-DA4C-4B0A-A94E-6BF66B358B7D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A939B80-0AD0-48AF-81A7-370716F56639"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:3.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D28528CE-4943-4F82-80C0-A629DA3E6702"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E22AF0-2B66-425A-A1EE-4F0E3B0433E7"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB34ECBE-33E8-40E1-936B-7800D2525AE6"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "107C59BE-D8CF-4A17-8DFB-BED2AB12388D"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36C86BB9-0328-4E34-BC2B-47B3471EC262"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A54A8681-2D8A-4B0B-A947-82F3CE1FB03C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0070D83-2E27-4DA8-8D10-A6A697216F36"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C9ACA63-4528-4090-B1EA-1FE57A6B0555"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7252935C-E421-4339-B61F-0299E28888DA"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DD342BF-096A-4082-B700-19629F2BDE87"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93141AB6-26F2-4C6D-95B3-D383EABB4034"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D5C61FF-7CD3-410A-94F2-5DE701466B1F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:4.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "28A01C87-B02A-4239-8340-B396D0E6B21C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06980521-B0EA-434D-89AD-A951EAF1D23F"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3AE6A93-3977-4B32-B2F6-55C94387DDE3"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E78F1F2C-2BFF-4D55-A754-102D6C42081B"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0A4AF71-8E71-432A-B908-361DAF99F4B9"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DEE0068D-C699-4646-9658-610409925A79"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87C215DD-BC98-4283-BF13-69556EF7CB78"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1C3966E-C136-47A9-B5B4-70613756ED27"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22AD2A1F-A637-47DE-A69F-DAE4ABDFA4BD"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6D398B8-821B-4DE9-ADF1-4983051F964C"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0CCE5F2-4D32-404B-BAAC-E64F11BD41FB"
}
],
"operator": "OR"
}
]
}
]