ID

VAR-201903-0417


CVE

CVE-2019-6226


TITLE

plural Apple Updates to product vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2019-001192

DESCRIPTION

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution. Apple Has released an update for each product.The expected impact depends on each vulnerability, but can be affected as follows: * Sandbox avoidance * Arbitrary code execution * Privilege escalation * information leak * Information falsification * Service operation interruption (DoS) * Arbitrary script execution. WebKit is prone to multiple memory-corruption vulnerabilities. A remote attacker can leverage these issues to execute arbitrary code in the context of the user running the application. Failed exploit attempts may result in a denial-of-service condition. Apple iOS, etc. are all products of Apple (Apple). Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser included with Mac OS X and iOS operating systems. WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products. The following products and versions are affected: Apple iOS prior to 12.1.3; Safari prior to 12.0.3; tvOS prior to 12.1.2; watchOS 5.1.3; Windows-based iCloud prior to 7.10. Installation note: Safari 12.0.3 may be obtained from the Mac App Store. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201903-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: WebkitGTK+: Multiple vulnerabilities Date: March 14, 2019 Bugs: #672108, #674702, #678334 ID: 201903-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been found in WebkitGTK+, the worst of which could result in the arbitrary execution of code. Background ========== WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-libs/webkit-gtk < 2.22.6 >= 2.22.6 Description =========== Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All WebkitGTK+ users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/webkit-gtk-2.22.6" References ========== [ 1 ] CVE-2019-6212 https://nvd.nist.gov/vuln/detail/CVE-2019-6212 [ 2 ] CVE-2019-6215 https://nvd.nist.gov/vuln/detail/CVE-2019-6215 [ 3 ] CVE-2019-6216 https://nvd.nist.gov/vuln/detail/CVE-2019-6216 [ 4 ] CVE-2019-6217 https://nvd.nist.gov/vuln/detail/CVE-2019-6217 [ 5 ] CVE-2019-6226 https://nvd.nist.gov/vuln/detail/CVE-2019-6226 [ 6 ] CVE-2019-6227 https://nvd.nist.gov/vuln/detail/CVE-2019-6227 [ 7 ] CVE-2019-6229 https://nvd.nist.gov/vuln/detail/CVE-2019-6229 [ 8 ] CVE-2019-6233 https://nvd.nist.gov/vuln/detail/CVE-2019-6233 [ 9 ] CVE-2019-6234 https://nvd.nist.gov/vuln/detail/CVE-2019-6234 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201903-12 Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org. License ======= Copyright 2019 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. https://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-1-22-1 iOS 12.1.3 iOS 12.1.3 is now available and addresses the following: AppleKeyStore Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: A memory corruption issue was addressed with improved validation. CVE-2019-6235: Brandon Azad Bluetooth Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An attacker in a privileged network position may be able to execute arbitrary code Description: An out-of-bounds read was addressed with improved input validation. CVE-2019-6200: an anonymous researcher Core Media Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to elevate privileges Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2019-6202: Fluoroacetate working with Trend Micro's Zero Day Initiative CVE-2019-6221: Fluoroacetate working with Trend Micro's Zero Day Initiative CoreAnimation Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to read restricted memory Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2019-6231: Zhuo Liang of Qihoo 360 Nirvan Team CoreAnimation Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to break out of its sandbox Description: A memory initialization issue was addressed with improved memory handling. CVE-2019-6230: Proteas, Shrek_wzw and Zhuo Liang of Qihoo 360 Nirvan Team FaceTime Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution Description: A buffer overflow issue was addressed with improved memory handling. CVE-2019-6224: Natalie Silvanovich of Google Project Zero IOKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to break out of its sandbox Description: A type confusion issue was addressed with improved memory handling. CVE-2019-6214: Ian Beer of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to elevate privileges Description: A memory corruption issue was addressed with improved validation. CVE-2019-6225: Brandon Azad of Google Project Zero, Qixun Zhao of Qihoo 360 Vulcan Team Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved input validation. CVE-2019-6210: Ned Williamson of Google Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may cause unexpected changes in memory shared between processes Description: A memory corruption issue was addressed with improved lock state checking. CVE-2019-6205: Ian Beer of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to execute arbitrary code with kernel privileges Description: A buffer overflow was addressed with improved bounds checking. CVE-2019-6213: Ian Beer of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to determine kernel memory layout Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. CVE-2019-6209: Brandon Azad of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may cause unexpected changes in memory shared between processes Description: A memory initialization issue was addressed with improved memory handling. CVE-2019-6208: Jann Horn of Google Project Zero Keyboard Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Password autofill may fill in passwords after they were manually cleared Description: An issue existed with autofill resuming after it was canceled. CVE-2019-6206: Sergey Pershenkov libxpc Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved input validation. CVE-2019-6218: Ian Beer of Google Project Zero Natural Language Processing Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted message may lead to a denial of service Description: A denial of service issue was addressed with improved validation. CVE-2019-6219: Authier Thomas Safari Reader Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to a cross site scripting attack Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. CVE-2019-6228: Ryan Pickren (ryanpickren.com) SQLite Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A maliciously crafted SQL query may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation. CVE-2018-20346: Tencent Blade Team CVE-2018-20505: Tencent Blade Team CVE-2018-20506: Tencent Blade Team WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-6227: Qixun Zhao of Qihoo 360 Vulcan Team CVE-2019-6233: G. Geshev from MWR Labs working with Trend Micro's Zero Day Initiative CVE-2019-6234: G. Geshev from MWR Labs working with Trend Micro's Zero Day Initiative WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue was addressed with improved validation. CVE-2019-6229: Ryan Pickren (ryanpickren.com) WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling. CVE-2019-6215: Lokihardt of Google Project Zero WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2019-6212: an anonymous researcher, Wen Xu of SSLab at Georgia Tech CVE-2019-6216: Fluoroacetate working with Trend Micro's Zero Day Initiative CVE-2019-6217: Fluoroacetate working with Trend Micro's Zero Day Initiative, Proteas, Shrek_wzw, and Zhuo Liang of Qihoo 360 Nirvan Team CVE-2019-6226: Apple WebRTC Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved state management. CVE-2019-6211: Georgi Geshev (@munmap), Fabi Beterke (@pwnfl4k3s), and Rob Miller (@trotmaster99) of MWR Labs (@mwrlabs) working with Trend Micro's Zero Day Initiative Additional recognition mDNSResponder We would like to acknowledge Fatemah Alharbi of University of California, Riverside (UCR) and Taibah University (TU), Feng Qian of University of Minnesota - Twin City, Jie Chang of LinkSure Network, Nael Abu-Ghazaleh of University of California, Riverside (UCR), Yuchen Zhou of Northeastern University, and Zhiyun Qian of University of California, Riverside (UCR) for their assistance. Safari Reader We would like to acknowledge Ryan Pickren (ryanpickren.com) for their assistance. WebKit We would like to acknowledge James Lee (@Windowsrcer) of Kryptos Logic for their assistance. Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 12.1.3". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCABHFiEEDNXJVNCJJEAVmJdZeC9tht7TK3EFAlxHSSwpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQeC9tht7TK3GA0RAA l3Yft6CRTyGtLyqIanBFP4sMtaxlIP44Y0+gPIf59DhZ7bzuy3s+cjnUJAxrqBC+ NAqrNur5x8OVBIS7T65njvccD7e7uGWBZfeEbMdplT5aK3AvRuW7MyXEo3nZu3dx gMRsubjQmwOnMB3Taxj0a6y2jvLU9DA7IfVyKb7ReCz3wv5KPb4BxLvbHwaMrbsJ SBETrGYMn4awTSmUs/IQTDECOzRLyicQnY44afDL/K9n/oB59VQm5ZUPDj9ofeQN UQsD7XVH19eI99N+uNQ+07GCqQ6++qe+kGVi2RR7HERt3wd4mnV895f6UvhlUjlU K1tY68ZuDNPZ54GJfniFI0OCYfcd5rYsPTnOt11heFnWfG+nnm2r+3BEh60RW5lW ONeyQ3ScubgMV2Teo3G0tWf9BGvKAI+qXbFuzkAMAucB+f7Oj06WDGhYPEAQZ8KR xLSb6nyfihQA6Bz4KbfppKC7I2GuyF6rl5iz+VBPHId7yaF0jxjEiJEF7RbLhbeg k7x8vJrKLR7hAs4AWCq69ZQ6VvmKLdgSNNCcbJIQNPCYtGabOP7xl4piDw4b46wq /LR6UNrYdf/U3hljPfKIBn+0e1EITcKHfUu85MyHftanF1JFYNp03eFJT5ouyMRt LD5C8YOX6VcEwCQqUpKmJD9wWwUehRhEiEffGkR+xSY=Jb8S -----END PGP SIGNATURE-----

Trust: 2.61

sources: NVD: CVE-2019-6226 // JVNDB: JVNDB-2019-001192 // BID: 106696 // VULHUB: VHN-157661 // VULMON: CVE-2019-6226 // PACKETSTORM: 151281 // PACKETSTORM: 151332 // PACKETSTORM: 151283 // PACKETSTORM: 151282 // PACKETSTORM: 152086 // PACKETSTORM: 151280

AFFECTED PRODUCTS

vendor:applemodel:icloudscope:ltversion:7.10

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:12.1.3

Trust: 1.0

vendor:applemodel:itunesscope:ltversion:12.9.3

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:5.1.3

Trust: 1.0

vendor:applemodel:safariscope:ltversion:12.0.3

Trust: 1.0

vendor:applemodel:tvosscope:ltversion:12.1.2

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:for windows 7.10 earlier

Trust: 0.8

vendor:applemodel:iosscope:ltversion:12.1.3 earlier

Trust: 0.8

vendor:applemodel:macos high sierrascope:eqversion:(security update 2019-001 not applied )

Trust: 0.8

vendor:applemodel:macos mojavescope:ltversion:10.14.3 earlier

Trust: 0.8

vendor:applemodel:macos sierrascope:eqversion:(security update 2019-001 not applied )

Trust: 0.8

vendor:applemodel:safariscope:ltversion:12.0.3 earlier

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:12.1.2 earlier

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:5.1.3 earlier

Trust: 0.8

vendor:applemodel:watch editionscope:eqversion:0

Trust: 0.3

vendor:applemodel:watchosscope:neversion:5.1.3

Trust: 0.3

vendor:applemodel:macos security updatescope:neversion:2019

Trust: 0.3

vendor:applemodel:iosscope:neversion:12.1.3

Trust: 0.3

vendor:applemodel:watch hermesscope:eqversion:0

Trust: 0.3

vendor:webkitmodel:open source project webkitscope:eqversion:0

Trust: 0.3

vendor:applemodel:tvscope:eqversion:0

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.14.3

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.6

Trust: 0.3

vendor:applemodel:ipod touchscope:eqversion:0

Trust: 0.3

vendor:applemodel:iphonescope:eqversion:0

Trust: 0.3

vendor:applemodel:ipadscope:eqversion:0

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13.6

Trust: 0.3

vendor:applemodel:tvosscope:neversion:12.1.2

Trust: 0.3

vendor:applemodel:watchscope:eqversion:0

Trust: 0.3

vendor:applemodel:safariscope:neversion:12.0.3

Trust: 0.3

vendor:applemodel:icloudscope:neversion:7.10

Trust: 0.3

sources: BID: 106696 // JVNDB: JVNDB-2019-001192 // NVD: CVE-2019-6226

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-6226
value: HIGH

Trust: 1.0

CNNVD: CNNVD-201901-802
value: HIGH

Trust: 0.6

VULHUB: VHN-157661
value: MEDIUM

Trust: 0.1

VULMON: CVE-2019-6226
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2019-6226
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

VULHUB: VHN-157661
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-6226
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

sources: VULHUB: VHN-157661 // VULMON: CVE-2019-6226 // CNNVD: CNNVD-201901-802 // NVD: CVE-2019-6226

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.1

problemtype:CWE-119

Trust: 0.1

sources: VULHUB: VHN-157661 // NVD: CVE-2019-6226

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201901-802

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201901-802

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-001192

PATCH

title:About the security content of iOS 12.1.3url:https://support.apple.com/en-us/HT209443

Trust: 0.8

title:About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierraurl:https://support.apple.com/en-us/HT209446

Trust: 0.8

title:About the security content of tvOS 12.1.2url:https://support.apple.com/en-us/HT209447

Trust: 0.8

title:About the security content of watchOS 5.1.3url:https://support.apple.com/en-us/HT209448

Trust: 0.8

title:About the security content of Safari 12.0.3url:https://support.apple.com/en-us/HT209449

Trust: 0.8

title:About the security content of iCloud for Windows 7.10url:https://support.apple.com/en-us/HT209451

Trust: 0.8

title:Multiple Apple product WebKit Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=88911

Trust: 0.6

sources: JVNDB: JVNDB-2019-001192 // CNNVD: CNNVD-201901-802

EXTERNAL IDS

db:NVDid:CVE-2019-6226

Trust: 2.7

db:BIDid:106696

Trust: 2.1

db:JVNid:JVNVU97670311

Trust: 0.8

db:JVNDBid:JVNDB-2019-001192

Trust: 0.8

db:CNNVDid:CNNVD-201901-802

Trust: 0.7

db:PACKETSTORMid:152086

Trust: 0.7

db:AUSCERTid:ESB-2019.0604

Trust: 0.6

db:AUSCERTid:ESB-2019.0639

Trust: 0.6

db:VULHUBid:VHN-157661

Trust: 0.1

db:VULMONid:CVE-2019-6226

Trust: 0.1

db:PACKETSTORMid:151281

Trust: 0.1

db:PACKETSTORMid:151332

Trust: 0.1

db:PACKETSTORMid:151283

Trust: 0.1

db:PACKETSTORMid:151282

Trust: 0.1

db:PACKETSTORMid:151280

Trust: 0.1

sources: VULHUB: VHN-157661 // VULMON: CVE-2019-6226 // BID: 106696 // JVNDB: JVNDB-2019-001192 // PACKETSTORM: 151281 // PACKETSTORM: 151332 // PACKETSTORM: 151283 // PACKETSTORM: 151282 // PACKETSTORM: 152086 // PACKETSTORM: 151280 // CNNVD: CNNVD-201901-802 // NVD: CVE-2019-6226

REFERENCES

url:http://www.securityfocus.com/bid/106696

Trust: 3.1

url:https://security.gentoo.org/glsa/201903-12

Trust: 1.9

url:https://support.apple.com/ht209443

Trust: 1.8

url:https://support.apple.com/ht209447

Trust: 1.8

url:https://support.apple.com/ht209448

Trust: 1.8

url:https://support.apple.com/ht209449

Trust: 1.8

url:https://support.apple.com/ht209450

Trust: 1.8

url:https://support.apple.com/ht209451

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2019-6226

Trust: 1.2

url:https://jvn.jp/vu/jvnvu97670311/index.html

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2019-6212

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-6216

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-6215

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-6227

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-6229

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2019-6217

Trust: 0.6

url:https://www.suse.com/support/update/announcement/2019/suse-su-20190497-1.html

Trust: 0.6

url:https://www.suse.com/support/update/announcement/2019/suse-su-20190511-1.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/76318

Trust: 0.6

url:https://www.auscert.org.au/bulletins/76166

Trust: 0.6

url:https://packetstormsecurity.com/files/152086/gentoo-linux-security-advisory-201903-12.html

Trust: 0.6

url:https://support.apple.com/kb/ht201222

Trust: 0.5

url:https://www.apple.com/support/security/pgp/

Trust: 0.5

url:https://nvd.nist.gov/vuln/detail/cve-2019-6233

Trust: 0.5

url:https://nvd.nist.gov/vuln/detail/cve-2019-6234

Trust: 0.5

url:https://nvd.nist.gov/vuln/detail/cve-2018-20346

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2018-20505

Trust: 0.4

url:https://nvd.nist.gov/vuln/detail/cve-2018-20506

Trust: 0.4

url:https://www.apple.com/

Trust: 0.3

url:http://www.apple.com/ios/

Trust: 0.3

url:http://www.apple.com/safari/

Trust: 0.3

url:http://www.apple.com/accessibility/tvos/

Trust: 0.3

url:http://www.apple.com/watchos-2/

Trust: 0.3

url:https://www.apple.com/icloud/

Trust: 0.3

url:https://support.apple.com/en-us/ht209451

Trust: 0.3

url:https://support.apple.com/en-us/ht209443

Trust: 0.3

url:https://support.apple.com/en-us/ht209449

Trust: 0.3

url:https://support.apple.com/en-us/ht209447

Trust: 0.3

url:https://support.apple.com/en-us/ht209448

Trust: 0.3

url:https://support.apple.com/en-us/ht201222

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2019-6221

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6235

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6210

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6225

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6205

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6213

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6214

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6230

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6208

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6224

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6231

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6218

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6209

Trust: 0.2

url:https://nvd.nist.gov/vuln/detail/cve-2019-6228

Trust: 0.2

url:https://cwe.mitre.org/data/definitions/787.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://support.apple.com/ht204283

Trust: 0.1

url:https://www.apple.com/itunes/download/

Trust: 0.1

url:https://creativecommons.org/licenses/by-sa/2.5

Trust: 0.1

url:https://security.gentoo.org/

Trust: 0.1

url:https://bugs.gentoo.org.

Trust: 0.1

url:https://www.apple.com/itunes/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-6211

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-6202

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-6200

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-6219

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-6206

Trust: 0.1

sources: VULHUB: VHN-157661 // VULMON: CVE-2019-6226 // BID: 106696 // JVNDB: JVNDB-2019-001192 // PACKETSTORM: 151281 // PACKETSTORM: 151332 // PACKETSTORM: 151283 // PACKETSTORM: 151282 // PACKETSTORM: 152086 // PACKETSTORM: 151280 // CNNVD: CNNVD-201901-802 // NVD: CVE-2019-6226

CREDITS

Apple and Qixun Zhao from Qihoo 360 Vulcan Team.,Gentoo

Trust: 0.6

sources: CNNVD: CNNVD-201901-802

SOURCES

db:VULHUBid:VHN-157661
db:VULMONid:CVE-2019-6226
db:BIDid:106696
db:JVNDBid:JVNDB-2019-001192
db:PACKETSTORMid:151281
db:PACKETSTORMid:151332
db:PACKETSTORMid:151283
db:PACKETSTORMid:151282
db:PACKETSTORMid:152086
db:PACKETSTORMid:151280
db:CNNVDid:CNNVD-201901-802
db:NVDid:CVE-2019-6226

LAST UPDATE DATE

2024-11-11T20:14:09.237000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-157661date:2020-08-24T00:00:00
db:VULMONid:CVE-2019-6226date:2020-08-24T00:00:00
db:BIDid:106696date:2019-01-22T00:00:00
db:JVNDBid:JVNDB-2019-001192date:2019-01-24T00:00:00
db:CNNVDid:CNNVD-201901-802date:2020-08-25T00:00:00
db:NVDid:CVE-2019-6226date:2020-08-24T17:37:01.140

SOURCES RELEASE DATE

db:VULHUBid:VHN-157661date:2019-03-05T00:00:00
db:VULMONid:CVE-2019-6226date:2019-03-05T00:00:00
db:BIDid:106696date:2019-01-22T00:00:00
db:JVNDBid:JVNDB-2019-001192date:2019-01-24T00:00:00
db:PACKETSTORMid:151281date:2019-01-23T21:27:12
db:PACKETSTORMid:151332date:2019-01-25T14:58:45
db:PACKETSTORMid:151283date:2019-01-23T21:28:00
db:PACKETSTORMid:151282date:2019-01-23T21:27:49
db:PACKETSTORMid:152086date:2019-03-14T16:23:59
db:PACKETSTORMid:151280date:2019-01-23T21:27:00
db:CNNVDid:CNNVD-201901-802date:2019-01-23T00:00:00
db:NVDid:CVE-2019-6226date:2019-03-05T16:29:02.293