Sign-up

ID

VAR-202104-0212


CVE

CVE-2020-29619


TITLE

plural  Apple  Product out-of-bounds read vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-017301

DESCRIPTION

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption. plural Apple The product contains an out-of-bounds read vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Apple macOS is a set of dedicated operating systems developed by Apple Corporation for Mac computers. There is a security vulnerability in Apple macOS. Please keep an eye on CNNVD or manufacturer announcements. Alternatively, on your watch, select "My Watch > General > About". -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3 iOS 14.3 and iPadOS 14.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT212003. App Store Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: An enterprise application installation prompt may display the wrong domain Description: A logic issue was addressed with improved state management. CVE-2020-29613: Ryan Pickren (ryanpickren.com) CoreAudio Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2020-27948: JunDong Xie of Ant Security Light-Year Lab FontParser Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted font may result in the disclosure of process memory Description: An information disclosure issue was addressed with improved state management. CVE-2020-27946: Mateusz Jurczyk of Google Project Zero FontParser Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of font files. CVE-2020-27943: Mateusz Jurczyk of Google Project Zero CVE-2020-27944: Mateusz Jurczyk of Google Project Zero ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to heap corruption Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-29617: XingWei Lin of Ant Security Light-Year Lab CVE-2020-29619: XingWei Lin of Ant Security Light-Year Lab ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-29618: XingWei Lin of Ant Security Light-Year Lab ImageIO Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2020-29611: Ivan Fratric of Google Project Zero Security Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Unauthorized code execution may lead to an authentication policy violation Description: This issue was addressed with improved checks. CVE-2020-27951: Apple WebRTC Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. CVE-2020-15969: an anonymous researcher Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 14.3 and iPadOS 14.3". This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEbURczHs1TP07VIfuZcsbuWJ6jjAFAl/YBhIACgkQZcsbuWJ6 jjA04Q/+IXkFUXAM2+3hUaOJqMziK6ICFLncPlf2oUMVpEd6ioff6mqjs7nu9piI yDcAmefcSqNd2pXxsNfhHMBAVPyrD4i0kGVgYq95U46rHezuNV33SEhyOPzVr0H4 4uwFd2KhedQvqyIBowRsc7JDITqvToK97oKufzoEUM8pCPeTeUYmYPuec5Gx8Q55 jkMWi8Km5LcW6I+OPEHZoh0121RFoRmTjVi91o9xYUH5C13PVrTsY15bLtLlVhM/ mPF22YY2c4JPig010kTFQn3btt63K2VDDCuYwytQhIh1zhqOu6Nd1I/Z0L2SxgXm ZFW0Z3Jt7KL8+CEFpVLcRCEHc/1oMbvg9LwKT5zP0oMgRWlGL+ikpJy0ZvnXl3u/ rxnik5nME+Ez/mKVVAqcD2pooPmhx/Rwo4dtdoMZrJOwFPMzuJ8BlGzmFHCrCiKu 22Rbe134LYa1wUKrTqTEpg/YdvDDwoH54vdVK3HniIeNJGaSjkh6PRhGYkTvTuje JeDAC4qUQLN8M2TsMN+18DrsFT6c3dfZmLm+gnYPBM7FYtu4tDfrjBMyf0Tu9xXp kit6ODbvY33k3oyqWIaK0icELt/qIhyj7C3shKSRXJsgqyS7qrAcfJWOLD12TVyO Q52KK16VlyH/EDwVILD2ntPTyXLb7NjTYIyrbM/7ROcuslHOJyU=YdmF -----END PGP SIGNATURE-----

Trust: 2.07

sources: NVD: CVE-2020-29619 // JVNDB: JVNDB-2020-017301 // VULHUB: VHN-376367 // VULMON: CVE-2020-29619 // PACKETSTORM: 160542 // PACKETSTORM: 160540 // PACKETSTORM: 160536

AFFECTED PRODUCTS

vendor:applemodel:tvosscope:ltversion:14.3

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:12.0

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:7.2

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.14.6

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:14.3

Trust: 1.0

vendor:applemodel:macosscope:ltversion:11.1.0

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.14.6

Trust: 1.0

vendor:applemodel:mac os xscope:gteversion:10.14

Trust: 1.0

vendor:applemodel:mac os xscope:gteversion:10.15

Trust: 1.0

vendor:applemodel:ipadosscope:ltversion:14.3

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.15.7

Trust: 1.0

vendor:applemodel:macosscope:gteversion:11.0

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.15.7

Trust: 1.0

vendor:アップルmodel:macos big surscope: - version: -

Trust: 0.8

vendor:アップルmodel:tvosscope: - version: -

Trust: 0.8

vendor:アップルmodel:icloudscope: - version: -

Trust: 0.8

vendor:アップルmodel:apple mac os xscope: - version: -

Trust: 0.8

vendor:アップルmodel:watchosscope: - version: -

Trust: 0.8

vendor:アップルmodel:ipadosscope: - version: -

Trust: 0.8

vendor:アップルmodel:iosscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2020-017301 // NVD: CVE-2020-29619

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-29619
value: HIGH

Trust: 1.0

NVD: CVE-2020-29619
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202012-1076
value: HIGH

Trust: 0.6

VULHUB: VHN-376367
value: MEDIUM

Trust: 0.1

VULMON: CVE-2020-29619
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-29619
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-376367
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-29619
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2020-29619
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-376367 // VULMON: CVE-2020-29619 // JVNDB: JVNDB-2020-017301 // CNNVD: CNNVD-202012-1076 // NVD: CVE-2020-29619

PROBLEMTYPE DATA

problemtype:CWE-125

Trust: 1.1

problemtype:Out-of-bounds read (CWE-125) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-376367 // JVNDB: JVNDB-2020-017301 // NVD: CVE-2020-29619

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202012-1076

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202012-1076

PATCH

title:HT212011 Apple  Security updateurl:https://support.apple.com/en-us/HT212003

Trust: 0.8

title:Apple macOS Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=137463

Trust: 0.6

title:Apple: macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojaveurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=60a51a6d3f600c46241622f208f75bff

Trust: 0.1

sources: VULMON: CVE-2020-29619 // JVNDB: JVNDB-2020-017301 // CNNVD: CNNVD-202012-1076

EXTERNAL IDS

db:NVDid:CVE-2020-29619

Trust: 3.7

db:PACKETSTORMid:160536

Trust: 0.8

db:JVNid:JVNVU95288122

Trust: 0.8

db:JVNDBid:JVNDB-2020-017301

Trust: 0.8

db:AUSCERTid:ESB-2020.4396

Trust: 0.6

db:CNNVDid:CNNVD-202012-1076

Trust: 0.6

db:PACKETSTORMid:160540

Trust: 0.2

db:PACKETSTORMid:160542

Trust: 0.2

db:VULHUBid:VHN-376367

Trust: 0.1

db:VULMONid:CVE-2020-29619

Trust: 0.1

sources: VULHUB: VHN-376367 // VULMON: CVE-2020-29619 // JVNDB: JVNDB-2020-017301 // PACKETSTORM: 160542 // PACKETSTORM: 160540 // PACKETSTORM: 160536 // CNNVD: CNNVD-202012-1076 // NVD: CVE-2020-29619

REFERENCES

url:https://support.apple.com/en-us/ht212003

Trust: 1.8

url:https://support.apple.com/en-us/ht212005

Trust: 1.8

url:https://support.apple.com/en-us/ht212009

Trust: 1.8

url:https://support.apple.com/en-us/ht212011

Trust: 1.8

url:https://support.apple.com/en-us/ht212145

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-29619

Trust: 1.7

url:https://jvn.jp/vu/jvnvu95288122/

Trust: 0.8

url:https://packetstormsecurity.com/files/160536/apple-security-advisory-2020-12-14-1.html

Trust: 0.6

url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-34108

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2020.4396/

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2020-15969

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-27948

Trust: 0.3

url:https://www.apple.com/support/security/pgp/

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-27943

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-27946

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-29618

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-29617

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-29611

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-27944

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2020-27951

Trust: 0.2

url:https://cwe.mitre.org/data/definitions/125.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:http://seclists.org/fulldisclosure/2020/dec/29

Trust: 0.1

url:https://support.apple.com/kb/ht212011

Trust: 0.1

url:https://support.apple.com/ht212005.

Trust: 0.1

url:https://support.apple.com/ht212009.

Trust: 0.1

url:https://support.apple.com/kb/ht204641

Trust: 0.1

url:https://www.apple.com/itunes/

Trust: 0.1

url:https://support.apple.com/ht212003.

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-29613

Trust: 0.1

sources: VULHUB: VHN-376367 // VULMON: CVE-2020-29619 // JVNDB: JVNDB-2020-017301 // PACKETSTORM: 160542 // PACKETSTORM: 160540 // PACKETSTORM: 160536 // CNNVD: CNNVD-202012-1076 // NVD: CVE-2020-29619

CREDITS

Apple

Trust: 0.9

sources: PACKETSTORM: 160542 // PACKETSTORM: 160540 // PACKETSTORM: 160536 // CNNVD: CNNVD-202012-1076

SOURCES

db:VULHUBid:VHN-376367
db:VULMONid:CVE-2020-29619
db:JVNDBid:JVNDB-2020-017301
db:PACKETSTORMid:160542
db:PACKETSTORMid:160540
db:PACKETSTORMid:160536
db:CNNVDid:CNNVD-202012-1076
db:NVDid:CVE-2020-29619

LAST UPDATE DATE

2024-08-14T12:35:17.942000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-376367date:2021-04-07T00:00:00
db:VULMONid:CVE-2020-29619date:2021-04-07T00:00:00
db:JVNDBid:JVNDB-2020-017301date:2022-09-07T05:02:00
db:CNNVDid:CNNVD-202012-1076date:2021-04-08T00:00:00
db:NVDid:CVE-2020-29619date:2021-04-07T18:49:14.420

SOURCES RELEASE DATE

db:VULHUBid:VHN-376367date:2021-04-02T00:00:00
db:VULMONid:CVE-2020-29619date:2021-04-02T00:00:00
db:JVNDBid:JVNDB-2020-017301date:2022-09-07T00:00:00
db:PACKETSTORMid:160542date:2020-12-16T18:02:43
db:PACKETSTORMid:160540date:2020-12-16T18:00:54
db:PACKETSTORMid:160536date:2020-12-16T17:56:45
db:CNNVDid:CNNVD-202012-1076date:2020-12-15T00:00:00
db:NVDid:CVE-2020-29619date:2021-04-02T18:15:17.717