Details of VAR-202108-1137

ID

VAR-202108-1137

CVE

CVE-2021-30983

TITLE

apple's iPadOS and iOS Classic buffer overflow vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-021149

DESCRIPTION

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges. apple's iPadOS and iOS Exists in a classic buffer overflow vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.8

sources: NVD: CVE-2021-30983 // JVNDB: JVNDB-2021-021149 // VULHUB: VHN-390716 // VULMON: CVE-2021-30983

AFFECTED PRODUCTS

vendor:	apple	model:	ipados	scope:	lt	version:	15.2	Trust: 1.0
vendor:	apple	model:	iphone os	scope:	lt	version:	15.2	Trust: 1.0
vendor:	アップル	model:	ipados	scope:	eq	version:	15.2	Trust: 0.8
vendor:	アップル	model:	ios	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-021149 // NVD: CVE-2021-30983

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-30983
value:	HIGH
Trust: 1.0
NVD:	CVE-2021-30983
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202108-2086
value:	HIGH
Trust: 0.6
VULHUB:	VHN-390716
value:	HIGH
Trust: 0.1
VULMON:	CVE-2021-30983
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2021-30983
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-390716
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-30983
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2021-30983
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-390716 // VULMON: CVE-2021-30983 // JVNDB: JVNDB-2021-021149 // CNNVD: CNNVD-202108-2086 // NVD: CVE-2021-30983

PROBLEMTYPE DATA

problemtype:	CWE-120	Trust: 1.1
problemtype:	Classic buffer overflow (CWE-120) [NVD evaluation ]	Trust: 0.8

sources: VULHUB: VHN-390716 // JVNDB: JVNDB-2021-021149 // NVD: CVE-2021-30983

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202108-2086

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202108-2086

PATCH

title:	HT212976 Apple Security update	url:	https://support.apple.com/en-us/HT212976	Trust: 0.8
title:	Apple iOS and iPadOS Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=174586	Trust: 0.6
title:	n-days	url:	https://github.com/b1n4r1b01/n-days	Trust: 0.1
title:	Known Exploited Vulnerabilities Detector	url:	https://github.com/Ostorlab/KEV	Trust: 0.1
title:	Threatpost	url:	https://threatpost.com/google-hermit-spyware-android-ios/180062/	Trust: 0.1
title:	The Register	url:	https://www.theregister.co.uk/2022/06/24/spyware_iphones_android_isp/	Trust: 0.1

sources: VULMON: CVE-2021-30983 // JVNDB: JVNDB-2021-021149 // CNNVD: CNNVD-202108-2086

EXTERNAL IDS

db:	NVD	id:	CVE-2021-30983	Trust: 3.4
db:	JVNDB	id:	JVNDB-2021-021149	Trust: 0.8
db:	CS-HELP	id:	SB2021121432	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.4260	Trust: 0.6
db:	CNNVD	id:	CNNVD-202108-2086	Trust: 0.6
db:	VULHUB	id:	VHN-390716	Trust: 0.1
db:	VULMON	id:	CVE-2021-30983	Trust: 0.1

sources: VULHUB: VHN-390716 // VULMON: CVE-2021-30983 // JVNDB: JVNDB-2021-021149 // CNNVD: CNNVD-202108-2086 // NVD: CVE-2021-30983

REFERENCES

url:	https://support.apple.com/en-us/ht212976	Trust: 2.4
url:	https://nvd.nist.gov/vuln/detail/cve-2021-30983	Trust: 0.8
url:	https://www.cisa.gov/known-exploited-vulnerabilities-catalog	Trust: 0.8
url:	https://vigilance.fr/vulnerability/apple-ios-multiple-vulnerabilities-37063	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021121432	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2021.4260	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/119.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://threatpost.com/google-hermit-spyware-android-ios/180062/	Trust: 0.1

sources: VULHUB: VHN-390716 // VULMON: CVE-2021-30983 // JVNDB: JVNDB-2021-021149 // CNNVD: CNNVD-202108-2086 // NVD: CVE-2021-30983

SOURCES

db:	VULHUB	id:	VHN-390716
db:	VULMON	id:	CVE-2021-30983
db:	JVNDB	id:	JVNDB-2021-021149
db:	CNNVD	id:	CNNVD-202108-2086
db:	NVD	id:	CVE-2021-30983

LAST UPDATE DATE

2024-08-14T12:14:01.552000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-390716	date:	2021-12-28T00:00:00
db:	VULMON	id:	CVE-2021-30983	date:	2023-11-07T00:00:00
db:	JVNDB	id:	JVNDB-2021-021149	date:	2024-07-18T01:47:00
db:	CNNVD	id:	CNNVD-202108-2086	date:	2021-12-29T00:00:00
db:	NVD	id:	CVE-2021-30983	date:	2024-06-28T14:13:38.343

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-390716	date:	2021-08-24T00:00:00
db:	VULMON	id:	CVE-2021-30983	date:	2021-08-24T00:00:00
db:	JVNDB	id:	JVNDB-2021-021149	date:	2024-07-18T00:00:00
db:	CNNVD	id:	CNNVD-202108-2086	date:	2021-08-24T00:00:00
db:	NVD	id:	CVE-2021-30983	date:	2021-08-24T19:15:23.507