Sign-up

ID

VAR-202010-1229


CVE

CVE-2020-9908


TITLE

macOS  Out-of-bounds read vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2020-012699

DESCRIPTION

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory. This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.The specific flaw exists within the AppleIntelKBLGraphics kext. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute code in the context of the kernel. Apple macOS Catalina is a set of dedicated operating systems developed by Apple for Mac computers

Trust: 2.43

sources: NVD: CVE-2020-9908 // JVNDB: JVNDB-2020-012699 // ZDI: ZDI-20-1082 // VULHUB: VHN-188033 // VULMON: CVE-2020-9908

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.15.6

Trust: 1.0

vendor:アップルmodel:apple mac os xscope:eqversion: -

Trust: 0.8

vendor:アップルmodel:apple mac os xscope:eqversion:10.14.6

Trust: 0.8

vendor:アップルmodel:apple mac os xscope:eqversion:10.13.6

Trust: 0.8

vendor:アップルmodel:apple mac os xscope:eqversion:10.15.5

Trust: 0.8

vendor:applemodel:macosscope: - version: -

Trust: 0.7

sources: ZDI: ZDI-20-1082 // JVNDB: JVNDB-2020-012699 // NVD: CVE-2020-9908

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-9908
value: HIGH

Trust: 1.0

NVD: CVE-2020-9908
value: HIGH

Trust: 0.8

ZDI: CVE-2020-9908
value: MEDIUM

Trust: 0.7

CNNVD: CNNVD-202010-1234
value: HIGH

Trust: 0.6

VULHUB: VHN-188033
value: MEDIUM

Trust: 0.1

VULMON: CVE-2020-9908
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-9908
severity: MEDIUM
baseScore: 6.6
vectorString: AV:L/AC:L/AU:N/C:C/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 9.2
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-188033
severity: MEDIUM
baseScore: 6.6
vectorString: AV:L/AC:L/AU:N/C:C/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 9.2
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-9908
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.2
version: 3.1

Trust: 1.0

NVD: CVE-2020-9908
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

ZDI: CVE-2020-9908
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.0
impactScore: 4.0
version: 3.0

Trust: 0.7

sources: ZDI: ZDI-20-1082 // VULHUB: VHN-188033 // VULMON: CVE-2020-9908 // JVNDB: JVNDB-2020-012699 // CNNVD: CNNVD-202010-1234 // NVD: CVE-2020-9908

PROBLEMTYPE DATA

problemtype:CWE-125

Trust: 1.1

problemtype:Out-of-bounds read (CWE-125) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-188033 // JVNDB: JVNDB-2020-012699 // NVD: CVE-2020-9908

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202010-1234

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202010-1234

PATCH

title:HT211289 Apple  Security updateurl:https://support.apple.com/en-us/HT211289

Trust: 0.8

title:Apple has issued an update to correct this vulnerability.url:https://support.apple.com/HT211289

Trust: 0.7

title:Apple macOS Catalina Buffer error vulnerability fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=132074

Trust: 0.6

sources: ZDI: ZDI-20-1082 // JVNDB: JVNDB-2020-012699 // CNNVD: CNNVD-202010-1234

EXTERNAL IDS

db:NVDid:CVE-2020-9908

Trust: 3.3

db:JVNid:JVNVU94090210

Trust: 0.8

db:JVNDBid:JVNDB-2020-012699

Trust: 0.8

db:ZDI_CANid:ZDI-CAN-11000

Trust: 0.7

db:ZDIid:ZDI-20-1082

Trust: 0.7

db:CNNVDid:CNNVD-202010-1234

Trust: 0.7

db:NSFOCUSid:50130

Trust: 0.6

db:VULHUBid:VHN-188033

Trust: 0.1

db:VULMONid:CVE-2020-9908

Trust: 0.1

sources: ZDI: ZDI-20-1082 // VULHUB: VHN-188033 // VULMON: CVE-2020-9908 // JVNDB: JVNDB-2020-012699 // CNNVD: CNNVD-202010-1234 // NVD: CVE-2020-9908

REFERENCES

url:https://support.apple.com/kb/ht211289

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-9908

Trust: 1.4

url:http://jvn.jp/vu/jvnvu94090210/index.html

Trust: 0.8

url:https://support.apple.com/ht211289

Trust: 0.7

url:https://support.apple.com/en-us/ht211289

Trust: 0.6

url:http://www.nsfocus.net/vulndb/50130

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/125.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: ZDI: ZDI-20-1082 // VULHUB: VHN-188033 // VULMON: CVE-2020-9908 // JVNDB: JVNDB-2020-012699 // CNNVD: CNNVD-202010-1234 // NVD: CVE-2020-9908

CREDITS

Junzhi Lu(@pwn0rz)

Trust: 0.7

sources: ZDI: ZDI-20-1082

SOURCES

db:ZDIid:ZDI-20-1082
db:VULHUBid:VHN-188033
db:VULMONid:CVE-2020-9908
db:JVNDBid:JVNDB-2020-012699
db:CNNVDid:CNNVD-202010-1234
db:NVDid:CVE-2020-9908

LAST UPDATE DATE

2024-11-23T21:09:20.913000+00:00


SOURCES UPDATE DATE

db:ZDIid:ZDI-20-1082date:2020-08-27T00:00:00
db:VULHUBid:VHN-188033date:2020-10-29T00:00:00
db:VULMONid:CVE-2020-9908date:2020-10-29T00:00:00
db:JVNDBid:JVNDB-2020-012699date:2021-05-24T06:32:00
db:CNNVDid:CNNVD-202010-1234date:2021-10-29T00:00:00
db:NVDid:CVE-2020-9908date:2024-11-21T05:41:30.437

SOURCES RELEASE DATE

db:ZDIid:ZDI-20-1082date:2020-08-27T00:00:00
db:VULHUBid:VHN-188033date:2020-10-22T00:00:00
db:VULMONid:CVE-2020-9908date:2020-10-22T00:00:00
db:JVNDBid:JVNDB-2020-012699date:2021-05-24T00:00:00
db:CNNVDid:CNNVD-202010-1234date:2020-10-22T00:00:00
db:NVDid:CVE-2020-9908date:2020-10-22T19:15:14.493