M00Nbsd

The issue is related to the 802.11 beacon handling routine, which failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. This can be exploited by a malicious beacon frame when a FreeBSD Wi-Fi client is in scanning mode, potentially leading to remote code execution. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

The issue is related to weaknesses in the authorization mechanism of the FreeBSD operating system kernel. It may allow a remote attacker to disable SMAP protection during a system call, potentially affecting the integrity of protected information. This weakness could be combined with other kernel bugs to craft an exploit.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave watchOS versions prior to 7.3 tvOS versions prior to 14.4 iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: A use after free issue was addressed with improved memory management, which may allow a remote attacker to cause a denial of service. Recommendations: For macOS versions prior to Big Sur 11.2, update to macOS Big Sur 11.2. For Security Update versions prior to 2021-001 Catalina, apply Security Update 2021-001 Catalina. For Security Update versions prior to 2021-001 Mojave, apply Security Update 2021-001 Mojave. For watchOS versions prior to 7.3, update to watchOS 7.3. For tvOS versions prior to 14.4, update to tvOS 14.4. For iOS versions prior to 14.4, update to iOS 14.4. For iPadOS versions prior to 14.4, update to iPadOS 14.4.

The issue is related to a time-of-check to time-of-use vulnerability in the sendmsg system call within the compat32 subsystem on 64-bit platforms. This allows a malicious userspace program to modify control message headers after they were validated, potentially leading to privilege escalation.

An out-of-bounds read issue was discovered, involving the `Kernel` component. This issue allows local users to bypass intended memory-read restrictions.

The issue is caused by a buffer overflow in the memory, allowing remote attackers to cause a denial of service or possibly have other impacts, such as memory corruption, via a crafted mach binary. This can be achieved by exploiting the "Kernel" component.

The issue is related to the kernel in the operating systems, which does not properly initialize an unspecified data structure. This allows remote attackers to execute arbitrary code via vectors involving network connectivity. The vulnerability is associated with errors in initializing undefined data structures and can be exploited by a remote attacker to execute arbitrary code by affecting network connections.

The issue is caused by a buffer overflow in the operating system's kernel. It may allow a local attacker to elevate privileges or cause a denial of service.

The issue is related to the fasttrap driver in the kernel, which is affected by resource management errors. This can be exploited by a local attacker to cause a denial of service through unspecified vectors, resulting in resource consumption.

The issue is related to errors in the code of the operating system, specifically in how HFS volumes are mounted. This can be exploited by a local attacker to cause a denial of service by mounting a crafted HFS volume.