PT-2020-16876

CVE-2020-27949

·

Published

2020-12-14

·

Updated

2021-04-08

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.1 Security Update 2020-001 Catalina (affected versions not specified) Security Update 2020-007 Mojave (affected versions not specified)
Description The issue allows a malicious application to cause unexpected changes in memory belonging to processes traced by DTrace. This is due to insufficient checks that can be exploited to perform unauthorized actions.
Recommendations For macOS Big Sur, update to version 11.1 or later. For Security Update 2020-001 Catalina, apply the security update. For Security Update 2020-007 Mojave, apply the security update. As a temporary workaround, consider restricting the use of DTrace until a patch is available.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾