M00Nbsd

**Name of the Vulnerable Software and Affected Versions** FreeBSD (affected versions not specified) **Description** The issue is related to the 802.11 beacon handling routine, which failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. This can be exploited by a malicious beacon frame when a FreeBSD Wi-Fi client is in scanning mode, potentially leading to remote code execution. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 12.2-STABLE before r369857 FreeBSD versions 12.2-RELEASE before p7 FreeBSD versions 13.0-STABLE before n245764-876ffe28796c FreeBSD versions 13.0-RELEASE before p1 **Description** The issue is related to weaknesses in the authorization mechanism of the FreeBSD operating system kernel. It may allow a remote attacker to disable SMAP protection during a system call, potentially affecting the integrity of protected information. This weakness could be combined with other kernel bugs to craft an exploit. **Recommendations** For FreeBSD versions 12.2-STABLE before r369857, update to a version after r369857 to resolve the issue. For FreeBSD versions 12.2-RELEASE before p7, update to a version after p7 to resolve the issue. For FreeBSD versions 13.0-STABLE before n245764-876ffe28796c, update to a version after n245764-876ffe28796c to resolve the issue. For FreeBSD versions 13.0-RELEASE before p1, update to a version after p1 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Big Sur 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave watchOS versions prior to 7.3 tvOS versions prior to 14.4 iOS versions prior to 14.4 iPadOS versions prior to 14.4 Description: A use after free issue was addressed with improved memory management, which may allow a remote attacker to cause a denial of service. Recommendations: For macOS versions prior to Big Sur 11.2, update to macOS Big Sur 11.2. For Security Update versions prior to 2021-001 Catalina, apply Security Update 2021-001 Catalina. For Security Update versions prior to 2021-001 Mojave, apply Security Update 2021-001 Mojave. For watchOS versions prior to 7.3, update to watchOS 7.3. For tvOS versions prior to 14.4, update to tvOS 14.4. For iOS versions prior to 14.4, update to iOS 14.4. For iPadOS versions prior to 14.4, update to iPadOS 14.4.

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 11.3-RELEASE before p12 FreeBSD versions 11.4-RELEASE before p2 FreeBSD versions 11.4-STABLE before r363919 FreeBSD versions 12.1-RELEASE before p8 FreeBSD versions 12.1-STABLE before r363918 **Description** The issue is related to a time-of-check to time-of-use vulnerability in the sendmsg system call within the compat32 subsystem on 64-bit platforms. This allows a malicious userspace program to modify control message headers after they were validated, potentially leading to privilege escalation. **Recommendations** For FreeBSD versions 11.3-RELEASE before p12, update to a version that includes the necessary patches. For FreeBSD versions 11.4-RELEASE before p2, update to a version that includes the necessary patches. For FreeBSD versions 11.4-STABLE before r363919, update to a version that includes the necessary patches. For FreeBSD versions 12.1-RELEASE before p8, update to a version that includes the necessary patches. For FreeBSD versions 12.1-STABLE before r363918, update to a version that includes the necessary patches.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.1 **Description** An out-of-bounds read issue was discovered, involving the `Kernel` component. This issue allows local users to bypass intended memory-read restrictions. **Recommendations** For macOS versions prior to 10.13.1, update to version 10.13.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.1 **Description** The issue is caused by a buffer overflow in the memory, allowing remote attackers to cause a denial of service or possibly have other impacts, such as memory corruption, via a crafted mach binary. This can be achieved by exploiting the "Kernel" component. **Recommendations** For macOS versions prior to 10.13.1, update to version 10.13.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Kernel component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** iOS versions prior to 9.1 OS X versions prior to 10.11.1 **Description** The issue is related to the kernel in the operating systems, which does not properly initialize an unspecified data structure. This allows remote attackers to execute arbitrary code via vectors involving network connectivity. The vulnerability is associated with errors in initializing undefined data structures and can be exploited by a remote attacker to execute arbitrary code by affecting network connections. **Recommendations** For iOS versions prior to 9.1, update to version 9.1 or later. For OS X versions prior to 10.11.1, update to version 10.11.1 or later.

**Name of the Vulnerable Software and Affected Versions** iOS (affected versions not specified) **Description** The issue is caused by a buffer overflow in the operating system's kernel. It may allow a local attacker to elevate privileges or cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.10.5 **Description** The issue is related to the fasttrap driver in the kernel, which is affected by resource management errors. This can be exploited by a local attacker to cause a denial of service through unspecified vectors, resulting in resource consumption. **Recommendations** For versions prior to 10.10.5, update to version 10.10.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple OS X versions prior to 10.10.5 **Description** The issue is related to errors in the code of the operating system, specifically in how HFS volumes are mounted. This can be exploited by a local attacker to cause a denial of service by mounting a crafted HFS volume. **Recommendations** For Apple OS X versions prior to 10.10.5, update to version 10.10.5 or later to resolve the issue. As a temporary workaround, consider restricting the ability to mount HFS volumes to minimize the risk of exploitation.