Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-23284

Published: 08/03/2024 Updated: 02/04/2024

Vulnerability Summary

A logic issue was addressed with improved state management. This issue is fixed in tvOS 17.4, macOS Sonoma 14.4, visionOS 1.1, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6, Safari 17.4. Processing maliciously crafted web content may prevent Content Security Policy from being enforced.

Vendor Advisories

Amazon Linux 2: ALAS-2024-2516
The issue was addressed with improved memory handling This issue is fixed in Safari 172, iOS 172 and iPadOS 172, macOS Sonoma 142 Processing web content may lead to a denial-of-service (CVE-2023-42956) A logic issue was addressed with improved validation This issue is fixed in tvOS 174, macOS Sonoma 144, visionOS 11, iOS 174 and iPadOS ...
Apple: macOS Sonoma 14.4
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: watchOS 10.4
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: tvOS 17.4
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: visionOS 1.1
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...
Apple: Safari 17.4
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security releases page Apple security documents reference vulnerabilities by CVE-ID whe ...

Mailing Lists

Full Disclosure: WebKitGTK and WPE WebKit Security Advisory WSA-2024-0002
<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> WebKitGTK and WPE WebKit Security Advisory WSA-2024-0002 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Adrian P ...
Full Disclosure: APPLE-SA-03-07-2024-6 tvOS 17.4
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-07-2024-6 tvOS 174 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Security vi ...
Full Disclosure: APPLE-SA-03-07-2024-2 macOS Sonoma 14.4
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-07-2024-2 macOS Sonoma 144 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Sec ...
Full Disclosure: APPLE-SA-03-07-2024-1 Safari 17.4
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-07-2024-1 Safari 174 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Security ...
Full Disclosure: APPLE-SA-03-07-2024-7 visionOS 1.1
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-07-2024-7 visionOS 11 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Security ...
Full Disclosure: APPLE-SA-03-07-2024-5 watchOS 10.4
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> APPLE-SA-03-07-2024-5 watchOS 104 <!--X-Subject-Header-End--> <!--X-Head-of-Message--> From: Apple Product Security ...

References

https://support.apple.com/en-us/HT214087https://support.apple.com/en-us/HT214086https://support.apple.com/en-us/HT214081https://support.apple.com/en-us/HT214082https://support.apple.com/en-us/HT214089https://support.apple.com/en-us/HT214084https://support.apple.com/en-us/HT214088http://seclists.org/fulldisclosure/2024/Mar/20http://seclists.org/fulldisclosure/2024/Mar/21http://seclists.org/fulldisclosure/2024/Mar/25http://seclists.org/fulldisclosure/2024/Mar/24http://seclists.org/fulldisclosure/2024/Mar/26https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAIPBVDQV3GHMSNSZNEJCRZEPM7BEYGF/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AO4BNNL5X2LQBJ6WX7VT4SGMA6R7DUU5/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PXORDRCSQAQU436W4S2Z3X5B5PDXL3LI/https://nvd.nist.govhttps://alas.aws.amazon.com/AL2/ALAS-2024-2516.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook