CVE-2020-3862

Published Feb 27, 2020

Last updated 3 years ago

Overview

Description: A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. A malicious website may be able to cause a denial of service.
Source: product-security@apple.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.5
Impact score: 3.6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "65AF31B2-A5B2-4BF5-B534-B53BE79CDDA2",
            "versionEndExcluding": "7.17"
          },
          {
            "criteria": "cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F2F63E96-27FA-4637-8081-A9B76C7385F8",
            "versionEndIncluding": "10.8",
            "versionStartIncluding": "10.0"
          },
          {
            "criteria": "cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*",
            "vulnerable": true,
            "matchCriteriaId": "15CC59BB-5F0C-4381-A7E7-EFFCC01CC308",
            "versionEndExcluding": "12.10.4"
          },
          {
            "criteria": "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BB81F563-28D4-425E-A81A-002557E23CF8",
            "versionEndExcluding": "13.0.5"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3DD89B34-EA75-4559-A112-13B489B2502A",
            "versionEndExcluding": "13.3.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4BFEAAB-906E-4F49-A6DB-5717BADD8089",
            "versionEndExcluding": "13.3.1"
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C2B3AC9-FAFE-4819-9538-A072B446BE78",
            "versionEndExcluding": "13.3.1"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B620311B-34A3-48A6-82DF-6F078D7A4493"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References