CVE-2019-8774

EPSS 0.6%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 oct 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service.

Productos afectados

Apple · iOS and iPadOS Apple · macOS

Referencias

https://support.apple.com/en-us/HT210603 https://support.apple.com/en-us/HT210634