CVE-2019-8577

EPSS 10.3%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 10.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

18 dic 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.

Productos afectados

Apple · iCloud for Windows Apple · iOS Apple · iTunes for Windows Apple · macOS Apple · tvOS Apple · watchOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/https://support.apple.com/HT210118 https://support.apple.com/HT210119 https://support.apple.com/HT210120 https://support.apple.com/HT210122 https://support.apple.com/HT210124 https://support.apple.com/HT210125 https://support.apple.com/HT210212