Published: 18/12/2019 Updated: 22/12/2019

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 188

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to determine kernel memory layout.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple mac os x
apple tvos
apple watchos

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-3-25-1 iOS 122   From: Apple Product Security via ...

getdirentriesattr kernel heap inofo leak

CVE-2019-6207 getdirentriesattr kernel heap inofo leak this vulneriliabity can be tirgger at sandbox at macOS<=10144 &&ios < 122 I will update more details about this vulneriliabity

MacOS kernel memory leak (4 bytes)

CVE-2019-6207 $ clang exploitc -o exploit $ /exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10141, should works on: MacOS < 10144 ; iOS < 122 ; tvOS < 122 ; watchOS < 52 Buffer length = 0x188 rt_msghdrrtm_inits (+0x20): 0x00001000 rt_msghdrrtm_inits (+0x20): 0x0075002F rt_msghdrrtm_inits (+0x20)

xnu kernel heap info leak

CVE-2019-6207 this vulneriliabity can be trigger in sandbox at macOS< 10145 &&ios < 122 I will update more details about this vulneriliabity There is a bug in sysctl_dumpentry ,which can leak the heap info Details: 1Like the function description sysctl_dumpentry is used in dumping the kernel table via sysctl(),this function will malloc a b

CWE-125 https://support.apple.com/HT209601 https://support.apple.com/HT209600 https://support.apple.com/HT209599 https://support.apple.com/HT209602 https://nvd.nist.gov https://github.com/dothanthitiendiettiende/CVE-2019-6207 http://seclists.org/fulldisclosure/2019/Mar/58

CVE-2019-6207

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect