PT-2020-16876
CVE-2020-27949
·
تاريخ النشر
2020-12-14
·
تاريخ التحديث
2021-04-08
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
macOS Big Sur versions prior to 11.1
Security Update 2020-001 Catalina (affected versions not specified)
Security Update 2020-007 Mojave (affected versions not specified)
Description
The issue allows a malicious application to cause unexpected changes in memory belonging to processes traced by DTrace. This is due to insufficient checks that can be exploited to perform unauthorized actions.
Recommendations
For macOS Big Sur, update to version 11.1 or later.
For Security Update 2020-001 Catalina, apply the security update.
For Security Update 2020-007 Mojave, apply the security update.
As a temporary workaround, consider restricting the use of DTrace until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾