Sign-up

ID

VAR-202010-1325


CVE

CVE-2020-3855


TITLE

Apple macOS Catalina Security hole

Trust: 0.6

sources: CNNVD: CNNVD-202001-1426

DESCRIPTION

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. A malicious application may be able to overwrite arbitrary files. Apple macOS Catalina is a set of dedicated operating systems developed by Apple for Mac computers. A security vulnerability exists in the System component of Apple macOS Catalina versions prior to 10.15.3. CVE-2020-3877: an anonymous researcher working with Trend Micro's Zero Day Initiative apache_mod_php Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Multiple issues in PHP Description: Multiple issues were addressed by updating to PHP version 7.3.11. CVE-2019-11043 Audio Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3857: Zhuo Liang of Qihoo 360 Vulcan Team autofs Available for: macOS Catalina 10.15.2 Impact: Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper Description: This was addressed with additional checks by Gatekeeper on files mounted through a network share. CVE-2020-3866: Jose Castro Almeida (@HackerOn2Wheels) and René Kroka (@rene_kroka) CoreBluetooth Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3848: Jianjun Dai of Qihoo 360 Alpha Lab CVE-2020-3849: Jianjun Dai of Qihoo 360 Alpha Lab CVE-2020-3850: Jianjun Dai of Qihoo 360 Alpha Lab CoreBluetooth Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-3847: Jianjun Dai of Qihoo 360 Alpha Lab Crash Reporter Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to access restricted files Description: A validation issue existed in the handling of symlinks. CVE-2020-3835: Csaba Fitzl (@theevilbit) Image Processing Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Viewing a maliciously crafted JPEG file may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3827: Samuel Groß of Google Project Zero ImageIO Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2020-3826: Samuel Groß of Google Project Zero CVE-2020-3870 CVE-2020-3878: Samuel Groß of Google Project Zero Intel Graphics Driver Available for: macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3845: Zhuo Liang of Qihoo 360 Vulcan Team IOAcceleratorFamily Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3837: Brandon Azad of Google Project Zero IPSec Available for: macOS Catalina 10.15.2 Impact: Loading a maliciously crafted racoon configuration file may lead to arbitrary code execution Description: An off by one issue existed in the handling of racoon configuration files. CVE-2020-3875: Brandon Azad of Google Project Zero Kernel Available for: macOS Catalina 10.15.2 Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed with improved memory handling. CVE-2020-3872: Haakon Garseg Mørk of Cognite and Cim Stordal of Cognite Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to execute arbitrary code with system privileges Description: A type confusion issue was addressed with improved memory handling. CVE-2020-3853: Brandon Azad of Google Project Zero Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to determine kernel memory layout Description: An access issue was addressed with improved memory management. CVE-2020-3836: Brandon Azad of Google Project Zero Kernel Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3842: Ned Williamson working with Google Project Zero CVE-2020-3871: Corellium libxml2 Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution Description: A buffer overflow was addressed with improved size validation. CVE-2020-3856: Ian Beer of Google Project Zero libxpc Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: An application may be able to gain elevated privileges Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2020-3829: Ian Beer of Google Project Zero PackageKit Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A malicious application may be able to overwrite arbitrary files Description: A validation issue existed in the handling of symlinks. CVE-2020-3830: Csaba Fitzl (@theevilbit) Security Available for: macOS Catalina 10.15.2 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2020-3854: Jakob Rieck (@0xdead10cc) and Maximilian Blochberger of the Security in Distributed Systems Group of University of Hamburg sudo Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: Certain configurations may allow a local attacker to execute arbitrary code Description: A buffer overflow issue was addressed with improved memory handling. CVE-2019-18634: Apple System Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6 Impact: A malicious application may be able to overwrite arbitrary files Description: An access issue was addressed with improved access restrictions. CVE-2020-3855: Csaba Fitzl (@theevilbit) Wi-Fi Available for: macOS Catalina 10.15.2 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2020-3839: s0ngsari of Theori and Lee of Seoul National University working with Trend Micro's Zero Day Initiative Wi-Fi Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.6, macOS Catalina 10.15.2 Impact: A remote attacker may be able to cause unexpected system termination or corrupt kernel memory Description: A memory corruption issue was addressed with improved input validation. CVE-2020-3838: Dayton Pidhirney (@_watbulb) Additional recognition Photos Storage We would like to acknowledge Salman Husain of UC Berkeley for their assistance. Installation note: macOS Catalina 10.15.3, Security Update 2020-001 Mojave, and Security Update 2020-001 High Sierra may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEM5FaaFRjww9EJgvRBz4uGe3y0M0FAl4wsjUACgkQBz4uGe3y 0M1CeQ//ZJ/ZlrPF1P8nFvUy5XnOEgSt5U3W3klWT1x7B7s5NOQQkh+Iw02+dkYZ hErXRA1Awvzw4SpOOoG1HiElt2qz1+N8NaKgg4+Evk1CPB3KaX9g8l+PBFSKyVqU GQUSlsPB2GXky92moq0TtFO9VCwsPbQfj/618RzUn/CSF5ifNI+fMdWAfrndZSRv yg6XndljJx7Ro1OeQI794Aa1KdxdErbqnai+i++gGAiKG8zg89HLxhwaEje0u59M 35iAp9HAksZwOD/YOWkhiksXjS/89qtyt2z3yrpSUh8s1f86NumMre6D2C9kwY1c 8XlaCN/KE8BGMXzg+daMibpeaIoweeObfw6tT8QlF2OtxKtnvm55C1nIIYKlVqen GS11EkWweC9ZAEepVaBML95JEmaSin13oTvRg2s+DaiLE/RsRxz09qLqdyj1sbdf 2Gyl9xnTPjcDuhvbaGZl/uIEHIkgpLnNrs3bVkUOQwJZU8hpFcE1jwgGwNo8Nkwz TCAi0s4+q7csgZuTOlHroXTteFm+UQcV4Sw7YCZ2Z3kNDkEJpDDf8PEWGrGyJa8p iZJ4FqP0D9pv0N161V6f6xZ6QZW379tZfAeEHeoIE6lAfDN7BnENsuph10dvK9IT 1HlUvSj57BkM6b4BcoT9WjyFIWNp3T7ySJ+K15PHXx707SX1R9w= =toYN -----END PGP SIGNATURE-----=

Trust: 1.17

sources: NVD: CVE-2020-3855 // VULHUB: VHN-181980 // VULMON: CVE-2020-3855 // PACKETSTORM: 156131

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.15.3

Trust: 1.0

sources: NVD: CVE-2020-3855

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-3855
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202001-1426
value: HIGH

Trust: 0.6

VULHUB: VHN-181980
value: MEDIUM

Trust: 0.1

VULMON: CVE-2020-3855
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-3855
severity: MEDIUM
baseScore: 5.8
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

VULHUB: VHN-181980
severity: MEDIUM
baseScore: 5.8
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-3855
baseSeverity: HIGH
baseScore: 7.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.2
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-181980 // VULMON: CVE-2020-3855 // CNNVD: CNNVD-202001-1426 // NVD: CVE-2020-3855

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2020-3855

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202001-1426

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202001-1426

PATCH

title:Apple macOS Catalina System Fixes for component security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=109521

Trust: 0.6

title:Apple: macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierraurl:https://vulmon.com/vendoradvisory?qidtp=apple_security_advisories&qid=0edbb02c87b058bc4d318b014c408f83

Trust: 0.1

sources: VULMON: CVE-2020-3855 // CNNVD: CNNVD-202001-1426

EXTERNAL IDS

db:NVDid:CVE-2020-3855

Trust: 1.9

db:CNNVDid:CNNVD-202001-1426

Trust: 0.7

db:PACKETSTORMid:156131

Trust: 0.7

db:AUSCERTid:ESB-2020.0351

Trust: 0.6

db:CNVDid:CNVD-2020-61029

Trust: 0.1

db:VULHUBid:VHN-181980

Trust: 0.1

db:VULMONid:CVE-2020-3855

Trust: 0.1

sources: VULHUB: VHN-181980 // VULMON: CVE-2020-3855 // PACKETSTORM: 156131 // CNNVD: CNNVD-202001-1426 // NVD: CVE-2020-3855

REFERENCES

url:https://support.apple.com/en-us/ht210919

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2020-3855

Trust: 0.7

url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-31449

Trust: 0.6

url:https://packetstormsecurity.com/files/156131/apple-security-advisory-2020-1-28-2.html

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2020.0351/

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

url:https://support.apple.com/kb/ht210919

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3826

Trust: 0.1

url:https://support.apple.com/kb/ht201222

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3839

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3849

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-11043

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3846

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3835

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3842

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3837

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3845

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3870

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3827

Trust: 0.1

url:https://support.apple.com/downloads/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3848

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3856

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2019-18634

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3866

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3857

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3840

Trust: 0.1

url:https://www.apple.com/support/security/pgp/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3871

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3850

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3854

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3853

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3843

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3847

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3838

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3830

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3836

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2020-3829

Trust: 0.1

sources: VULHUB: VHN-181980 // VULMON: CVE-2020-3855 // PACKETSTORM: 156131 // CNNVD: CNNVD-202001-1426 // NVD: CVE-2020-3855

CREDITS

Apple

Trust: 0.7

sources: PACKETSTORM: 156131 // CNNVD: CNNVD-202001-1426

SOURCES

db:VULHUBid:VHN-181980
db:VULMONid:CVE-2020-3855
db:PACKETSTORMid:156131
db:CNNVDid:CNNVD-202001-1426
db:NVDid:CVE-2020-3855

LAST UPDATE DATE

2024-11-23T20:21:07.918000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-181980date:2020-10-29T00:00:00
db:VULMONid:CVE-2020-3855date:2020-10-29T00:00:00
db:CNNVDid:CNNVD-202001-1426date:2021-08-16T00:00:00
db:NVDid:CVE-2020-3855date:2024-11-21T05:31:50.727

SOURCES RELEASE DATE

db:VULHUBid:VHN-181980date:2020-10-27T00:00:00
db:VULMONid:CVE-2020-3855date:2020-10-27T00:00:00
db:PACKETSTORMid:156131date:2020-01-29T17:17:36
db:CNNVDid:CNNVD-202001-1426date:2020-01-30T00:00:00
db:NVDid:CVE-2020-3855date:2020-10-27T21:15:15.023