PT-2020-16876

CVE-2020-27949

·

تاريخ النشر

2020-12-14

·

تاريخ التحديث

2021-04-08

الوصف من

CVSS 3.1
5.5
متوسطة
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.1 Security Update 2020-001 Catalina (affected versions not specified) Security Update 2020-007 Mojave (affected versions not specified)
Description The issue allows a malicious application to cause unexpected changes in memory belonging to processes traced by DTrace. This is due to insufficient checks that can be exploited to perform unauthorized actions.
Recommendations For macOS Big Sur, update to version 11.1 or later. For Security Update 2020-001 Catalina, apply the security update. For Security Update 2020-007 Mojave, apply the security update. As a temporary workaround, consider restricting the use of DTrace until a patch is available.
قابلية الاستغلال
استغلال
إصلاح
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾